Overview

overview

10

Static

static

10

015e20b9ec...cs.exe

windows7-x64

10

015e20b9ec...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    015e20b9ec38a7c115693165f828eafba397a7b6a0b791da874e9815a8e0bd7c_NeikiAnalytics.exe

  • Size

    71KB

  • Sample

    240702-tdlbhazepd

  • MD5

    5dee7425c4f33a4c7093fa5d1a04d9b0

  • SHA1

    941b35c801c00b8fd94a0f96db00703b9ece13e0

  • SHA256

    015e20b9ec38a7c115693165f828eafba397a7b6a0b791da874e9815a8e0bd7c

  • SHA512

    560d86bd1357e5cddb1cd51d8ebfc586b9988103a57279e56100752f489a875acb17f7f024bbae9da42c4ce2584c4ff9a8df2a1c4cf9320d3cde44540c2c8c6a

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:ndseIOMEZEyFjEOFqTiQmQDHIbH

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      015e20b9ec38a7c115693165f828eafba397a7b6a0b791da874e9815a8e0bd7c_NeikiAnalytics.exe

    • Size

      71KB

    • MD5

      5dee7425c4f33a4c7093fa5d1a04d9b0

    • SHA1

      941b35c801c00b8fd94a0f96db00703b9ece13e0

    • SHA256

      015e20b9ec38a7c115693165f828eafba397a7b6a0b791da874e9815a8e0bd7c

    • SHA512

      560d86bd1357e5cddb1cd51d8ebfc586b9988103a57279e56100752f489a875acb17f7f024bbae9da42c4ce2584c4ff9a8df2a1c4cf9320d3cde44540c2c8c6a

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:ndseIOMEZEyFjEOFqTiQmQDHIbH

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks