General
-
Target
89f0584fdc33316bf1c0e9942879ba5100a533de1809d36ef35e7b964e370b25.exe
-
Size
96KB
-
Sample
241211-lvlplaxmgs
-
MD5
e10b3a7a7069066eed78dadc8378cde7
-
SHA1
537f76364cb78e9b7a5d569a0eb0c02c7b20904e
-
SHA256
89f0584fdc33316bf1c0e9942879ba5100a533de1809d36ef35e7b964e370b25
-
SHA512
9c42fc40335ee2169192235f6cd1c66dc0714facd9d76baa70c4076a43147bcc3bd36c1cd0065d381162cd8452eb77bd018d12c11fff35da8bb205e2f39ccc87
-
SSDEEP
1536:YnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:YGs8cd8eXlYairZYqMddH13B
Static task
static1
Behavioral task
behavioral1
Sample
89f0584fdc33316bf1c0e9942879ba5100a533de1809d36ef35e7b964e370b25.exe
Resource
win7-20240708-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
89f0584fdc33316bf1c0e9942879ba5100a533de1809d36ef35e7b964e370b25.exe
-
Size
96KB
-
MD5
e10b3a7a7069066eed78dadc8378cde7
-
SHA1
537f76364cb78e9b7a5d569a0eb0c02c7b20904e
-
SHA256
89f0584fdc33316bf1c0e9942879ba5100a533de1809d36ef35e7b964e370b25
-
SHA512
9c42fc40335ee2169192235f6cd1c66dc0714facd9d76baa70c4076a43147bcc3bd36c1cd0065d381162cd8452eb77bd018d12c11fff35da8bb205e2f39ccc87
-
SSDEEP
1536:YnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:YGs8cd8eXlYairZYqMddH13B
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-