General
-
Target
5cdb13bab77a57029ce7ec4ca3cfaf72ae9a2c26907536ef7826ad1d1a94d933.exe
-
Size
134KB
-
Sample
241201-z8by7sslct
-
MD5
74d65e56dfa0dae94994c69487b7318d
-
SHA1
b5986171aed86cdbae59169dc2fdb06a3f84d424
-
SHA256
5cdb13bab77a57029ce7ec4ca3cfaf72ae9a2c26907536ef7826ad1d1a94d933
-
SHA512
2b711a6548adcbc25c1646f916f6a03b7283ed91e82380efefd38e24ab5282513543e7bf5bff16da40c92acaa4d0f25dcf1e05211977224e99beea815c25e01e
-
SSDEEP
1536:kDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCi1:6iRTeH0iqAW6J6f1tqF6dngNmaZCiaI
Static task
static1
Behavioral task
behavioral1
Sample
5cdb13bab77a57029ce7ec4ca3cfaf72ae9a2c26907536ef7826ad1d1a94d933.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
5cdb13bab77a57029ce7ec4ca3cfaf72ae9a2c26907536ef7826ad1d1a94d933.exe
-
Size
134KB
-
MD5
74d65e56dfa0dae94994c69487b7318d
-
SHA1
b5986171aed86cdbae59169dc2fdb06a3f84d424
-
SHA256
5cdb13bab77a57029ce7ec4ca3cfaf72ae9a2c26907536ef7826ad1d1a94d933
-
SHA512
2b711a6548adcbc25c1646f916f6a03b7283ed91e82380efefd38e24ab5282513543e7bf5bff16da40c92acaa4d0f25dcf1e05211977224e99beea815c25e01e
-
SSDEEP
1536:kDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCi1:6iRTeH0iqAW6J6f1tqF6dngNmaZCiaI
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-