Overview

overview

10

Static

static

3

4d7946438a...cs.exe

windows7-x64

10

4d7946438a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d7946438aad2fe086abb75e5c7ac310_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240617-fmq2fszark

  • MD5

    4d7946438aad2fe086abb75e5c7ac310

  • SHA1

    314acadca6fb71db801ccbb7c98e362dcaec1658

  • SHA256

    487d5d95f1ddfb0daf9013d74c20b5df99e35ab812c3a0c9e54cd35ec1dda9f3

  • SHA512

    feed1973b8957e2d38095e71e2a577d7fb57f02d401112a67716e6caea7ed90da52400bdc6f9784e8413969cf203d5a89efc927032265d30b10f998b25ce042d

  • SSDEEP

    1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:SGs8cd8eXlYairZYqMddH13L

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4d7946438aad2fe086abb75e5c7ac310_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      4d7946438aad2fe086abb75e5c7ac310

    • SHA1

      314acadca6fb71db801ccbb7c98e362dcaec1658

    • SHA256

      487d5d95f1ddfb0daf9013d74c20b5df99e35ab812c3a0c9e54cd35ec1dda9f3

    • SHA512

      feed1973b8957e2d38095e71e2a577d7fb57f02d401112a67716e6caea7ed90da52400bdc6f9784e8413969cf203d5a89efc927032265d30b10f998b25ce042d

    • SSDEEP

      1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:SGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks