General
-
Target
8f39a9b357600c54e03bdbf409c5bb54ce6ca63adaf98fbebdb46a6385f662c4N.exe
-
Size
96KB
-
Sample
241129-h5qjraxrgj
-
MD5
9e70ef82f04aa92c97ad7a9ad6502b80
-
SHA1
c9cf403dbdf0e27fc633138049bc4d936c0e30b5
-
SHA256
8f39a9b357600c54e03bdbf409c5bb54ce6ca63adaf98fbebdb46a6385f662c4
-
SHA512
5d255df58545f737eee45f7868fa93952bf85ed7dcc5f6bdad00a0ee74c877350cdd233b0a300c7be2cde5fe28884a02ebcb5cd2a55e0a621a6367d6f49af86e
-
SSDEEP
1536:+nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:+Gs8cd8eXlYairZYqMddH13B
Static task
static1
Behavioral task
behavioral1
Sample
8f39a9b357600c54e03bdbf409c5bb54ce6ca63adaf98fbebdb46a6385f662c4N.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
8f39a9b357600c54e03bdbf409c5bb54ce6ca63adaf98fbebdb46a6385f662c4N.exe
-
Size
96KB
-
MD5
9e70ef82f04aa92c97ad7a9ad6502b80
-
SHA1
c9cf403dbdf0e27fc633138049bc4d936c0e30b5
-
SHA256
8f39a9b357600c54e03bdbf409c5bb54ce6ca63adaf98fbebdb46a6385f662c4
-
SHA512
5d255df58545f737eee45f7868fa93952bf85ed7dcc5f6bdad00a0ee74c877350cdd233b0a300c7be2cde5fe28884a02ebcb5cd2a55e0a621a6367d6f49af86e
-
SSDEEP
1536:+nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:+Gs8cd8eXlYairZYqMddH13B
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-