General
-
Target
da89d114cdce5c625c9dfe5b397b70cf7b129febb0f58b49685a4fed6da33830.exe
-
Size
134KB
-
Sample
241124-xclsestjfw
-
MD5
8d1f38c9f1405352a2dcceff061f1483
-
SHA1
9dc92890740b026fb64c497d5d8586480395d26a
-
SHA256
da89d114cdce5c625c9dfe5b397b70cf7b129febb0f58b49685a4fed6da33830
-
SHA512
18af5e875f81d07177ca65312749b7b741b6831478f369c5451fd3ceb938f7d4ce36450d28bd0ed5566d0be17a272c1856be1f3285c794689058305200500b13
-
SSDEEP
1536:jDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCil:viRTeH0iqAW6J6f1tqF6dngNmaZCiaC
Static task
static1
Behavioral task
behavioral1
Sample
da89d114cdce5c625c9dfe5b397b70cf7b129febb0f58b49685a4fed6da33830.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
da89d114cdce5c625c9dfe5b397b70cf7b129febb0f58b49685a4fed6da33830.exe
-
Size
134KB
-
MD5
8d1f38c9f1405352a2dcceff061f1483
-
SHA1
9dc92890740b026fb64c497d5d8586480395d26a
-
SHA256
da89d114cdce5c625c9dfe5b397b70cf7b129febb0f58b49685a4fed6da33830
-
SHA512
18af5e875f81d07177ca65312749b7b741b6831478f369c5451fd3ceb938f7d4ce36450d28bd0ed5566d0be17a272c1856be1f3285c794689058305200500b13
-
SSDEEP
1536:jDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCil:viRTeH0iqAW6J6f1tqF6dngNmaZCiaC
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-