General
-
Target
6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c
-
Size
96KB
-
Sample
241216-3jgpyatlaz
-
MD5
83f7b311b9ecda871573dcf6e7440124
-
SHA1
0416d1d3ca34bc17eea652db45f47e492ce0afb0
-
SHA256
6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c
-
SHA512
9305f3e807816b7f333b183b1b2887798f2cde555c99a50915c75f5de4121c9647888ea7d49e300834904e72126e537ed5f62b249d8f08e234255588f8a62e79
-
SSDEEP
1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:jGs8cd8eXlYairZYqMddH13a
Static task
static1
Behavioral task
behavioral1
Sample
6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c
-
Size
96KB
-
MD5
83f7b311b9ecda871573dcf6e7440124
-
SHA1
0416d1d3ca34bc17eea652db45f47e492ce0afb0
-
SHA256
6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c
-
SHA512
9305f3e807816b7f333b183b1b2887798f2cde555c99a50915c75f5de4121c9647888ea7d49e300834904e72126e537ed5f62b249d8f08e234255588f8a62e79
-
SSDEEP
1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:jGs8cd8eXlYairZYqMddH13a
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-