General
-
Target
90ed83560c03ef781567bd3259ebb5f016bfc11819c3e340638f6b29d2ba1a7a
-
Size
96KB
-
Sample
241201-bjv4sa1pg1
-
MD5
dce20b254bff3c538292d9f361f93d75
-
SHA1
bb68615d37020a329f20aa12e0731ac55fcd31ec
-
SHA256
90ed83560c03ef781567bd3259ebb5f016bfc11819c3e340638f6b29d2ba1a7a
-
SHA512
08487c992b0c3cbed96e0e04e4211d9b008f3510be266b685ee4283c047b5b4b28d02573c0fe548449dfe1b54e6fcd7aabb606016035edcd65a0ae43d0f6fb0b
-
SSDEEP
1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:UGs8cd8eXlYairZYqMddH137
Static task
static1
Behavioral task
behavioral1
Sample
90ed83560c03ef781567bd3259ebb5f016bfc11819c3e340638f6b29d2ba1a7a.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
90ed83560c03ef781567bd3259ebb5f016bfc11819c3e340638f6b29d2ba1a7a
-
Size
96KB
-
MD5
dce20b254bff3c538292d9f361f93d75
-
SHA1
bb68615d37020a329f20aa12e0731ac55fcd31ec
-
SHA256
90ed83560c03ef781567bd3259ebb5f016bfc11819c3e340638f6b29d2ba1a7a
-
SHA512
08487c992b0c3cbed96e0e04e4211d9b008f3510be266b685ee4283c047b5b4b28d02573c0fe548449dfe1b54e6fcd7aabb606016035edcd65a0ae43d0f6fb0b
-
SSDEEP
1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:UGs8cd8eXlYairZYqMddH137
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-