General
-
Target
15d61bf8d6a1ea48198ee726610e25263a290aa35721adb5b46e60a713f0a3f0N.exe
-
Size
96KB
-
Sample
241205-elmrzaxqdy
-
MD5
908bcf3c4fadd2ae2629523879d59250
-
SHA1
9fc9f54fc234dc2d4fc69165c3bf50623f0aae73
-
SHA256
15d61bf8d6a1ea48198ee726610e25263a290aa35721adb5b46e60a713f0a3f0
-
SHA512
80582a387d6b3bf1346189d847ec85cabef6d854f2cc138eb0e49b530db2508d5972d1deedbb718f16a4041d23240e1f1e7b0d51cc420f8d9026816f37168154
-
SSDEEP
1536:ZnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:ZGs8cd8eXlYairZYqMddH137
Static task
static1
Behavioral task
behavioral1
Sample
15d61bf8d6a1ea48198ee726610e25263a290aa35721adb5b46e60a713f0a3f0N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
15d61bf8d6a1ea48198ee726610e25263a290aa35721adb5b46e60a713f0a3f0N.exe
-
Size
96KB
-
MD5
908bcf3c4fadd2ae2629523879d59250
-
SHA1
9fc9f54fc234dc2d4fc69165c3bf50623f0aae73
-
SHA256
15d61bf8d6a1ea48198ee726610e25263a290aa35721adb5b46e60a713f0a3f0
-
SHA512
80582a387d6b3bf1346189d847ec85cabef6d854f2cc138eb0e49b530db2508d5972d1deedbb718f16a4041d23240e1f1e7b0d51cc420f8d9026816f37168154
-
SSDEEP
1536:ZnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:ZGs8cd8eXlYairZYqMddH137
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-