neconyd | 28c52b9440b6fec7891c120eec2cdf12fc6adf385d64ea1d24db4c84bf1812d7 | Triage

Sharing

General

Target

28c52b9440b6fec7891c120eec2cdf12fc6adf385d64ea1d24db4c84bf1812d7_NeikiAnalytics.exe
Size

92KB
Sample

240624-bmfs9swdjm
MD5

b51aecfa380551c154a47bb551f1b0a0
SHA1

05183a5821a43643291d5ea039616bb0b9a6dcbd
SHA256

28c52b9440b6fec7891c120eec2cdf12fc6adf385d64ea1d24db4c84bf1812d7
SHA512

e9b9b24964ab081a2e9a6ae74791fce982f709f07b6c664e3085fd8224f0c985be6e86e3f6a3348fb6da6638d584ddedb89b27e589c05d85448b73d044b0e940
SSDEEP

1536:Ad9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIO/EZEyFjEOFqTiQm5l/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  28c52b9440b6fec7891c120eec2cdf12fc6adf385d64ea1d24db4c84bf1812d7_NeikiAnalytics.exe
- Size
  
  92KB
- MD5
  
  b51aecfa380551c154a47bb551f1b0a0
- SHA1
  
  05183a5821a43643291d5ea039616bb0b9a6dcbd
- SHA256
  
  28c52b9440b6fec7891c120eec2cdf12fc6adf385d64ea1d24db4c84bf1812d7
- SHA512
  
  e9b9b24964ab081a2e9a6ae74791fce982f709f07b6c664e3085fd8224f0c985be6e86e3f6a3348fb6da6638d584ddedb89b27e589c05d85448b73d044b0e940
- SSDEEP
  
  1536:Ad9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIO/EZEyFjEOFqTiQm5l/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2