General
-
Target
a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115.exe
-
Size
96KB
-
Sample
241202-f74s2s1rbz
-
MD5
69fb77d843534d1472a385245398dafc
-
SHA1
75877faa1f0af52e1421f6a1e7d354677ac7a7c6
-
SHA256
a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115
-
SHA512
079432c632d2b33f20fa8133f6282d56e5ae73271ba7ae716649e5fb243482777df227d35f3beb8dd09f084ee627d6993ee824fb68a973db7817c8a44b9b0e98
-
SSDEEP
1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:UGs8cd8eXlYairZYqMddH13x
Static task
static1
Behavioral task
behavioral1
Sample
a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115.exe
Resource
win7-20240708-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115.exe
-
Size
96KB
-
MD5
69fb77d843534d1472a385245398dafc
-
SHA1
75877faa1f0af52e1421f6a1e7d354677ac7a7c6
-
SHA256
a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115
-
SHA512
079432c632d2b33f20fa8133f6282d56e5ae73271ba7ae716649e5fb243482777df227d35f3beb8dd09f084ee627d6993ee824fb68a973db7817c8a44b9b0e98
-
SSDEEP
1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:UGs8cd8eXlYairZYqMddH13x
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-