General
-
Target
706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fcN.exe
-
Size
96KB
-
Sample
241202-cnmhwayrfr
-
MD5
42937ce35b7658b053cf8734ece52ff0
-
SHA1
f888c23184de6dbcc4bbbf0e34c2b1fbc2262668
-
SHA256
706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fc
-
SHA512
6f2961584d83f371124b5983645d8fe5eeb148e3c5170c5f8506ed3b2fc28522f9ef5bbccb5274405b56d8cbf69d94ca75c05bebe9f0947d01ce04caf9e2b577
-
SSDEEP
1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:lGs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fcN.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fcN.exe
-
Size
96KB
-
MD5
42937ce35b7658b053cf8734ece52ff0
-
SHA1
f888c23184de6dbcc4bbbf0e34c2b1fbc2262668
-
SHA256
706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fc
-
SHA512
6f2961584d83f371124b5983645d8fe5eeb148e3c5170c5f8506ed3b2fc28522f9ef5bbccb5274405b56d8cbf69d94ca75c05bebe9f0947d01ce04caf9e2b577
-
SSDEEP
1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:lGs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-