General

  • Target

    95b60ef591c101326a924541f60f1bf0_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240617-qlel5ssejd

  • MD5

    95b60ef591c101326a924541f60f1bf0

  • SHA1

    b0e0c44a0bba640158c5cc88998e0b146ad9059c

  • SHA256

    a1c53bbe911c9795b89f287668da88b9042716d65538cc076ce9025986400f01

  • SHA512

    4e6fcc47fffc206c5e7dc87e0a604a0e92a16c76a461d2b40781b1a047b6525ffbf9b032ad0d7ecb927617866ae42d1643449b6459a87aae3a1ac244df70e5e5

  • SSDEEP

    1536:yd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:CdseIO+EZEyFjEOFqTiQmOl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      95b60ef591c101326a924541f60f1bf0_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      95b60ef591c101326a924541f60f1bf0

    • SHA1

      b0e0c44a0bba640158c5cc88998e0b146ad9059c

    • SHA256

      a1c53bbe911c9795b89f287668da88b9042716d65538cc076ce9025986400f01

    • SHA512

      4e6fcc47fffc206c5e7dc87e0a604a0e92a16c76a461d2b40781b1a047b6525ffbf9b032ad0d7ecb927617866ae42d1643449b6459a87aae3a1ac244df70e5e5

    • SSDEEP

      1536:yd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:CdseIO+EZEyFjEOFqTiQmOl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks