General
-
Target
65c01cf7fad189150b07d0446868b805f03fbb4af10bc393f02afe03a3e7bf34.exe
-
Size
134KB
-
Sample
241128-cfjf9azphv
-
MD5
966c07af2755cb188d97e669d7e2e6cc
-
SHA1
7be05fde06fe976cf751ba097ca9e0b8d9c5ff39
-
SHA256
65c01cf7fad189150b07d0446868b805f03fbb4af10bc393f02afe03a3e7bf34
-
SHA512
c82052e82903e9a23d14762d4f0779955d639aa513567080aeda335a4b68af737428e5082efc561950826a82e745bc7bd35dfddf531ac0b89e39ba2f764d193b
-
SSDEEP
1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiP:hiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
Static task
static1
Behavioral task
behavioral1
Sample
65c01cf7fad189150b07d0446868b805f03fbb4af10bc393f02afe03a3e7bf34.exe
Resource
win7-20240708-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
65c01cf7fad189150b07d0446868b805f03fbb4af10bc393f02afe03a3e7bf34.exe
-
Size
134KB
-
MD5
966c07af2755cb188d97e669d7e2e6cc
-
SHA1
7be05fde06fe976cf751ba097ca9e0b8d9c5ff39
-
SHA256
65c01cf7fad189150b07d0446868b805f03fbb4af10bc393f02afe03a3e7bf34
-
SHA512
c82052e82903e9a23d14762d4f0779955d639aa513567080aeda335a4b68af737428e5082efc561950826a82e745bc7bd35dfddf531ac0b89e39ba2f764d193b
-
SSDEEP
1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiP:hiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-