General
- Target 3a1e84878623ec461fbbfe0b1f6352a0N.exe
- Size 96KB
- Sample240721-bae17steml
- SHA256 f3046648449f626dff90090313cf222369bd72ac454c39935b68e87ef1247932
- MD5 3a1e84878623ec461fbbfe0b1f6352a0
- SHA1 9e717da749261c8e3a89bd96c71f4023d65cef2b
- SHA512 ce1b707a4eadc1dfb5b940ccbb5e6fd55d2a568ec0b735519676c3cec6bf232fcd6d67b8171f82ebde4c3d80c14a3318e72b394015be622d5ca89576a19e066a
- SSDEEP 1536:enAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:eGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a1e84878623ec461fbbfe0b1f6352a0N.exe
Resource
win7-20240704-en
6 signatures
120 seconds
Malware Config
Extracted
Family
-
neconyd
C2
-
http://ow5dirasuek.com/
-
http://mkkuei4kdsz.com/
-
http://lousta.net/
Targets
-
- Target 3a1e84878623ec461fbbfe0b1f6352a0N.exe
- Size 96KB
- SHA256 f3046648449f626dff90090313cf222369bd72ac454c39935b68e87ef1247932
- MD5 3a1e84878623ec461fbbfe0b1f6352a0
- SHA1 9e717da749261c8e3a89bd96c71f4023d65cef2b
- SHA512 ce1b707a4eadc1dfb5b940ccbb5e6fd55d2a568ec0b735519676c3cec6bf232fcd6d67b8171f82ebde4c3d80c14a3318e72b394015be622d5ca89576a19e066a
- SSDEEP 1536:enAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:eGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext