General
-
Target
307e3dbd22a45bf0cc0f00cde444f51365cad3ca957049dcacbcdf9a5d898e71
-
Size
96KB
-
Sample
241123-zsd4mawlgw
-
MD5
8f7f7db245aee200ebf38710c06f45d8
-
SHA1
30280a29276d44962d1b8e04f99f1e0d9b184966
-
SHA256
307e3dbd22a45bf0cc0f00cde444f51365cad3ca957049dcacbcdf9a5d898e71
-
SHA512
8bc3a0f7be153057698161870a86e3f0fd3992ea5ecc37d614e35023142d7237121f85a549621b0b30eb71df3a806ee143cab2221a3295a6e8296eb2d438eacb
-
SSDEEP
1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:/Gs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
307e3dbd22a45bf0cc0f00cde444f51365cad3ca957049dcacbcdf9a5d898e71.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
307e3dbd22a45bf0cc0f00cde444f51365cad3ca957049dcacbcdf9a5d898e71
-
Size
96KB
-
MD5
8f7f7db245aee200ebf38710c06f45d8
-
SHA1
30280a29276d44962d1b8e04f99f1e0d9b184966
-
SHA256
307e3dbd22a45bf0cc0f00cde444f51365cad3ca957049dcacbcdf9a5d898e71
-
SHA512
8bc3a0f7be153057698161870a86e3f0fd3992ea5ecc37d614e35023142d7237121f85a549621b0b30eb71df3a806ee143cab2221a3295a6e8296eb2d438eacb
-
SSDEEP
1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:/Gs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-