General
-
Target
b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9eN.exe
-
Size
80KB
-
Sample
241128-3mpvqavmaz
-
MD5
e75273806a2269f82d7de52bb1e7aef0
-
SHA1
04e9a96117282e0f9d03c78f240bda153f5bfffd
-
SHA256
b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9e
-
SHA512
1746af1dbc275c4f9c0379c163fd0b129e51d220db76c569df323832e5d2b6fcc974df05a14fedcf77c54e9e74f2e96837d14c983308fa05958f219378c652f2
-
SSDEEP
1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:adseIOMEZEyFjEOFqTiQmOl/5xPvw3
Behavioral task
behavioral1
Sample
b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9eN.exe
Resource
win7-20241023-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9eN.exe
-
Size
80KB
-
MD5
e75273806a2269f82d7de52bb1e7aef0
-
SHA1
04e9a96117282e0f9d03c78f240bda153f5bfffd
-
SHA256
b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9e
-
SHA512
1746af1dbc275c4f9c0379c163fd0b129e51d220db76c569df323832e5d2b6fcc974df05a14fedcf77c54e9e74f2e96837d14c983308fa05958f219378c652f2
-
SSDEEP
1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:adseIOMEZEyFjEOFqTiQmOl/5xPvw3
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-