General

  • Target

    69ea3a90daa51e9572e72498128b7150_NeikiAnalytics.exe

  • Size

    84KB

  • Sample

    240617-kaz6tawerk

  • MD5

    69ea3a90daa51e9572e72498128b7150

  • SHA1

    a4938e2f3756bbd05c21413b9f815ae1e74b1fdd

  • SHA256

    0d896e1e34b5c9f76d8e7280e0cacfb5b124d93db8aa426dab65a9b1fd316c49

  • SHA512

    2b68fc29450e526eea5c1f644ef41c1bfe8914f92fa10eaeef2caa6a948dbc4307d17149267ac264d968ff764346f1e9327ad5c269e484d98f47827a0ae5e593

  • SSDEEP

    768:CMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:CbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      69ea3a90daa51e9572e72498128b7150_NeikiAnalytics.exe

    • Size

      84KB

    • MD5

      69ea3a90daa51e9572e72498128b7150

    • SHA1

      a4938e2f3756bbd05c21413b9f815ae1e74b1fdd

    • SHA256

      0d896e1e34b5c9f76d8e7280e0cacfb5b124d93db8aa426dab65a9b1fd316c49

    • SHA512

      2b68fc29450e526eea5c1f644ef41c1bfe8914f92fa10eaeef2caa6a948dbc4307d17149267ac264d968ff764346f1e9327ad5c269e484d98f47827a0ae5e593

    • SSDEEP

      768:CMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:CbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks