General
-
Target
5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5N.exe
-
Size
96KB
-
Sample
241130-ftvm8atpfv
-
MD5
73c8725f4cc2e9353e25fc29ba382050
-
SHA1
38a31f74e6df578a4fbce4169bec50937fb85708
-
SHA256
5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5
-
SHA512
bd23f2b3995b41c450a3ba1a8b9d610bd37894afbe1e160086a93dbe213a903233523bcadc4b779eadb8aa042a2d000ad7ee241eac586e03021b214c5c96991c
-
SSDEEP
1536:6nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxq:6Gs8cd8eXlYairZYqMddH13q
Static task
static1
Behavioral task
behavioral1
Sample
5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5N.exe
-
Size
96KB
-
MD5
73c8725f4cc2e9353e25fc29ba382050
-
SHA1
38a31f74e6df578a4fbce4169bec50937fb85708
-
SHA256
5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5
-
SHA512
bd23f2b3995b41c450a3ba1a8b9d610bd37894afbe1e160086a93dbe213a903233523bcadc4b779eadb8aa042a2d000ad7ee241eac586e03021b214c5c96991c
-
SSDEEP
1536:6nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxq:6Gs8cd8eXlYairZYqMddH13q
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-