General
-
Target
1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207.exe
-
Size
96KB
-
Sample
241201-vtwyls1ngm
-
MD5
84a9a10d1287fc1b9940e5ef1ceeb2cd
-
SHA1
d5f9398706d2250e347fb8947e02a2ccf8fa1033
-
SHA256
1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207
-
SHA512
b4b5fef50de13fa51f28907c3933942a4351ec2afec60b4c46a9f5f25bca4665b708c5135148d587d41f0c32e341b66938ab754847b45dabc56e738da53923aa
-
SSDEEP
1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:MGs8cd8eXlYairZYqMddH13h
Static task
static1
Behavioral task
behavioral1
Sample
1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207.exe
-
Size
96KB
-
MD5
84a9a10d1287fc1b9940e5ef1ceeb2cd
-
SHA1
d5f9398706d2250e347fb8947e02a2ccf8fa1033
-
SHA256
1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207
-
SHA512
b4b5fef50de13fa51f28907c3933942a4351ec2afec60b4c46a9f5f25bca4665b708c5135148d587d41f0c32e341b66938ab754847b45dabc56e738da53923aa
-
SSDEEP
1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:MGs8cd8eXlYairZYqMddH13h
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-