General
-
Target
3084467274704f89cc85a340280df7f5afb86f1fc4cc95de3ab452a3235f843f.exe
-
Size
96KB
-
Sample
241202-p6vcnazmbr
-
MD5
2417ed6e2b275f1f0f254ffeecf1d9fe
-
SHA1
e77863df7b7a0983b5b4db7958dd301bfaa9b6dc
-
SHA256
3084467274704f89cc85a340280df7f5afb86f1fc4cc95de3ab452a3235f843f
-
SHA512
794f5a0587630a29fc3c91131d26d249b5acf47080b033558361b3edd5ceb4d0dabc2c20f85eef6aa16658794a878a60d332830084594a807249e666d528228f
-
SSDEEP
1536:QnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:QGs8cd8eXlYairZYqMddH13z
Static task
static1
Behavioral task
behavioral1
Sample
3084467274704f89cc85a340280df7f5afb86f1fc4cc95de3ab452a3235f843f.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
3084467274704f89cc85a340280df7f5afb86f1fc4cc95de3ab452a3235f843f.exe
-
Size
96KB
-
MD5
2417ed6e2b275f1f0f254ffeecf1d9fe
-
SHA1
e77863df7b7a0983b5b4db7958dd301bfaa9b6dc
-
SHA256
3084467274704f89cc85a340280df7f5afb86f1fc4cc95de3ab452a3235f843f
-
SHA512
794f5a0587630a29fc3c91131d26d249b5acf47080b033558361b3edd5ceb4d0dabc2c20f85eef6aa16658794a878a60d332830084594a807249e666d528228f
-
SSDEEP
1536:QnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:QGs8cd8eXlYairZYqMddH13z
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-