General
-
Target
dc1446baafddfe6cb8303a4bff18deca9f848619015e57b940177ab21870c63b.exe
-
Size
134KB
-
Sample
241123-pw52ea1nam
-
MD5
f509f339493cdb5e2f4eebf6ca108ee6
-
SHA1
4b4874d604a083fb3afd6a53d79f2534214a0f3a
-
SHA256
dc1446baafddfe6cb8303a4bff18deca9f848619015e57b940177ab21870c63b
-
SHA512
d4ff198a564867890e047852750dfe20e919063c63a900aa4f9fe85eb9bed3c56959463676c28bdc442f3306ee7f52095d588259a36ffdef6a97b328f1e5e9d1
-
SSDEEP
1536:cDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:CiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
Static task
static1
Behavioral task
behavioral1
Sample
dc1446baafddfe6cb8303a4bff18deca9f848619015e57b940177ab21870c63b.exe
Resource
win7-20240729-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
dc1446baafddfe6cb8303a4bff18deca9f848619015e57b940177ab21870c63b.exe
-
Size
134KB
-
MD5
f509f339493cdb5e2f4eebf6ca108ee6
-
SHA1
4b4874d604a083fb3afd6a53d79f2534214a0f3a
-
SHA256
dc1446baafddfe6cb8303a4bff18deca9f848619015e57b940177ab21870c63b
-
SHA512
d4ff198a564867890e047852750dfe20e919063c63a900aa4f9fe85eb9bed3c56959463676c28bdc442f3306ee7f52095d588259a36ffdef6a97b328f1e5e9d1
-
SSDEEP
1536:cDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:CiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-