General

  • Target

    5dec9c03b92db8a34d75b0f1d58cd2f3c55893367bfe2abb87d95ee42852edb6_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240628-b6r1msxckp

  • MD5

    1cc4c6b2cfea9917ed87c9a0be518340

  • SHA1

    3eee2449cd62489c646d54bd75ecb9d4ffb06452

  • SHA256

    5dec9c03b92db8a34d75b0f1d58cd2f3c55893367bfe2abb87d95ee42852edb6

  • SHA512

    ce5a8f79fede8631afb111c7355f006159dc6469c3be9a3450fe80ecc08537b5697505bd127d8187cbb4f42764097ece840a9ea0139c35e1f9670bf4f4e8b247

  • SSDEEP

    1536:nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:PdseIOMEZEyFjEOFqTiQmOl/5xPvw3

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5dec9c03b92db8a34d75b0f1d58cd2f3c55893367bfe2abb87d95ee42852edb6_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      1cc4c6b2cfea9917ed87c9a0be518340

    • SHA1

      3eee2449cd62489c646d54bd75ecb9d4ffb06452

    • SHA256

      5dec9c03b92db8a34d75b0f1d58cd2f3c55893367bfe2abb87d95ee42852edb6

    • SHA512

      ce5a8f79fede8631afb111c7355f006159dc6469c3be9a3450fe80ecc08537b5697505bd127d8187cbb4f42764097ece840a9ea0139c35e1f9670bf4f4e8b247

    • SSDEEP

      1536:nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:PdseIOMEZEyFjEOFqTiQmOl/5xPvw3

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks