General
-
Target
f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e.exe
-
Size
96KB
-
Sample
241203-y5xaasxqej
-
MD5
381d0ec608a380f4b48868c4af1b0b28
-
SHA1
79ac26cc0f0d0cc441a0214c134721eff7fc39e8
-
SHA256
f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e
-
SHA512
b085738ea1ab4eac1ea0551cb119d7ade8fcb1d6b584a0177274f14120566d56ed3bb9bcb3c41c81a23fe4041bc81ef3b30dcf8019a3620ec121dd3705256e46
-
SSDEEP
1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:aGs8cd8eXlYairZYqMddH13a
Static task
static1
Behavioral task
behavioral1
Sample
f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e.exe
Resource
win7-20240708-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e.exe
-
Size
96KB
-
MD5
381d0ec608a380f4b48868c4af1b0b28
-
SHA1
79ac26cc0f0d0cc441a0214c134721eff7fc39e8
-
SHA256
f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e
-
SHA512
b085738ea1ab4eac1ea0551cb119d7ade8fcb1d6b584a0177274f14120566d56ed3bb9bcb3c41c81a23fe4041bc81ef3b30dcf8019a3620ec121dd3705256e46
-
SSDEEP
1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:aGs8cd8eXlYairZYqMddH13a
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-