General
-
Target
0970457ec5e1be106a356d6c657e11a6e5c4627724d74641915dd1dcd9698e28N.exe
-
Size
96KB
-
Sample
241205-q7dlzaxlds
-
MD5
9c367121455f7c190a2b95b57eb4f580
-
SHA1
80aa31fc53a3b99bfeda3f4ba8234f2bd8de98ef
-
SHA256
0970457ec5e1be106a356d6c657e11a6e5c4627724d74641915dd1dcd9698e28
-
SHA512
a419dc985d1188d35f9922d02baa73b86c9abdfba62293732d1caf9500940cc012f4ffba1aae87caede45d9772d90d8c0e8db6c419f3bfd9d5cd1605c126e8ac
-
SSDEEP
1536:gnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:gGs8cd8eXlYairZYqMddH137
Static task
static1
Behavioral task
behavioral1
Sample
0970457ec5e1be106a356d6c657e11a6e5c4627724d74641915dd1dcd9698e28N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
0970457ec5e1be106a356d6c657e11a6e5c4627724d74641915dd1dcd9698e28N.exe
-
Size
96KB
-
MD5
9c367121455f7c190a2b95b57eb4f580
-
SHA1
80aa31fc53a3b99bfeda3f4ba8234f2bd8de98ef
-
SHA256
0970457ec5e1be106a356d6c657e11a6e5c4627724d74641915dd1dcd9698e28
-
SHA512
a419dc985d1188d35f9922d02baa73b86c9abdfba62293732d1caf9500940cc012f4ffba1aae87caede45d9772d90d8c0e8db6c419f3bfd9d5cd1605c126e8ac
-
SSDEEP
1536:gnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:gGs8cd8eXlYairZYqMddH137
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-