Overview

overview

10

Static

static

10

6873b57d39...cs.exe

windows7-x64

10

6873b57d39...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6873b57d395ec41f03464c3a0a6bc78ca957b8d7dd355c05e17450539839cab1_NeikiAnalytics.exe

  • Size

    35KB

  • Sample

    240628-c13evswgpd

  • MD5

    8f3e28ba07afddecdba692071fe4bd20

  • SHA1

    0d21fdddf1577d9b8115b3f2c0f7aa127499ad6b

  • SHA256

    6873b57d395ec41f03464c3a0a6bc78ca957b8d7dd355c05e17450539839cab1

  • SHA512

    c1a5648d2d8749f02780603fe674aceb3e1a965d7f5237b48c03632bd9942e921b2698878097958744b3158b0b8d790c7c8089de734ec9cdbe677fddc8f961bc

  • SSDEEP

    768:a6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Z8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
neconydtrojanupx

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6873b57d395ec41f03464c3a0a6bc78ca957b8d7dd355c05e17450539839cab1_NeikiAnalytics.exe

    • Size

      35KB

    • MD5

      8f3e28ba07afddecdba692071fe4bd20

    • SHA1

      0d21fdddf1577d9b8115b3f2c0f7aa127499ad6b

    • SHA256

      6873b57d395ec41f03464c3a0a6bc78ca957b8d7dd355c05e17450539839cab1

    • SHA512

      c1a5648d2d8749f02780603fe674aceb3e1a965d7f5237b48c03632bd9942e921b2698878097958744b3158b0b8d790c7c8089de734ec9cdbe677fddc8f961bc

    • SSDEEP

      768:a6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Z8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    neconydtrojanupx

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks