General
-
Target
70a20ee052a03dd900e71902d2a80b10d3cf14c409970342192acdbb8c44c3baN.exe
-
Size
96KB
-
Sample
241216-lrt7kawlhn
-
MD5
175804491419924eb9cf95b29e411080
-
SHA1
bb1d15177426f78fb336c09714ff203915f39f46
-
SHA256
70a20ee052a03dd900e71902d2a80b10d3cf14c409970342192acdbb8c44c3ba
-
SHA512
ab3fad3131117fad88cb43d5e8c8adc741a710ed9c45a54266688f856a8b2745c461211c600291ebb257d6c58ac812f0f4eb9d7face98e4cacad1a53abd32617
-
SSDEEP
1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:/Gs8cd8eXlYairZYqMddH137
Static task
static1
Behavioral task
behavioral1
Sample
70a20ee052a03dd900e71902d2a80b10d3cf14c409970342192acdbb8c44c3baN.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
70a20ee052a03dd900e71902d2a80b10d3cf14c409970342192acdbb8c44c3baN.exe
-
Size
96KB
-
MD5
175804491419924eb9cf95b29e411080
-
SHA1
bb1d15177426f78fb336c09714ff203915f39f46
-
SHA256
70a20ee052a03dd900e71902d2a80b10d3cf14c409970342192acdbb8c44c3ba
-
SHA512
ab3fad3131117fad88cb43d5e8c8adc741a710ed9c45a54266688f856a8b2745c461211c600291ebb257d6c58ac812f0f4eb9d7face98e4cacad1a53abd32617
-
SSDEEP
1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxx7:/Gs8cd8eXlYairZYqMddH137
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-