General
-
Target
dd5d756f778abb42918981d67f7033d98344fabc27c95ee9573a414efe589864.exe
-
Size
96KB
-
Sample
241204-btymnavjh1
-
MD5
1dbbcbf48568594f574817811b1b8af8
-
SHA1
c1b3437ad6d2d1927fa2c47f2fcf3176b519bdb3
-
SHA256
dd5d756f778abb42918981d67f7033d98344fabc27c95ee9573a414efe589864
-
SHA512
c7ebb602eb9a339a49a97ff31914d51d81e3793e982655aa750066fc213388e1cf79d1161c7f476ae9f8ed530becaba6cfb2b90233b0156c99917d2c1d937752
-
SSDEEP
1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:4Gs8cd8eXlYairZYqMddH13B
Static task
static1
Behavioral task
behavioral1
Sample
dd5d756f778abb42918981d67f7033d98344fabc27c95ee9573a414efe589864.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
dd5d756f778abb42918981d67f7033d98344fabc27c95ee9573a414efe589864.exe
-
Size
96KB
-
MD5
1dbbcbf48568594f574817811b1b8af8
-
SHA1
c1b3437ad6d2d1927fa2c47f2fcf3176b519bdb3
-
SHA256
dd5d756f778abb42918981d67f7033d98344fabc27c95ee9573a414efe589864
-
SHA512
c7ebb602eb9a339a49a97ff31914d51d81e3793e982655aa750066fc213388e1cf79d1161c7f476ae9f8ed530becaba6cfb2b90233b0156c99917d2c1d937752
-
SSDEEP
1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:4Gs8cd8eXlYairZYqMddH13B
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-