General
-
Target
db7a84a0a9b75e881d6978b0280189748f4cfeb8329c12ac99b3b1885f72a3aeN.exe
-
Size
96KB
-
Sample
241126-3bvlts1pem
-
MD5
8c25e60ad60f4e68592180027bdac740
-
SHA1
9d6237c18d8fd7a8c1facb6f117f6bb72a9e4c81
-
SHA256
db7a84a0a9b75e881d6978b0280189748f4cfeb8329c12ac99b3b1885f72a3ae
-
SHA512
986b3214767b9b0c7fcc7eb044fc5563ee9b54b29664a01b242ebdedecc10007d819c2e903cf55c4089cc79d7f43eb6685e101793142f04cfdf498f4c63701e0
-
SSDEEP
1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:aGs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
db7a84a0a9b75e881d6978b0280189748f4cfeb8329c12ac99b3b1885f72a3aeN.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
db7a84a0a9b75e881d6978b0280189748f4cfeb8329c12ac99b3b1885f72a3aeN.exe
-
Size
96KB
-
MD5
8c25e60ad60f4e68592180027bdac740
-
SHA1
9d6237c18d8fd7a8c1facb6f117f6bb72a9e4c81
-
SHA256
db7a84a0a9b75e881d6978b0280189748f4cfeb8329c12ac99b3b1885f72a3ae
-
SHA512
986b3214767b9b0c7fcc7eb044fc5563ee9b54b29664a01b242ebdedecc10007d819c2e903cf55c4089cc79d7f43eb6685e101793142f04cfdf498f4c63701e0
-
SSDEEP
1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:aGs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-