General
-
Target
69e911d6f0942e1f72e2d9b976d0a23c6dbdf9a568f1274ad6aeb70330d93563
-
Size
96KB
-
Sample
241229-3n66dszrgk
-
MD5
a328aa3fd251b34ef2f6b5792ceca650
-
SHA1
76d9c111bbbda4288ec3321304353597d68150d7
-
SHA256
69e911d6f0942e1f72e2d9b976d0a23c6dbdf9a568f1274ad6aeb70330d93563
-
SHA512
b21b63f526df378d8b6a7309f27d7175860a2ecfedb4395f25654267894ede5fa343ac23a0c4bb2d6cbdfda7f2982795251eec65b9cae05d4f28ddac2f20a2e7
-
SSDEEP
1536:nnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:nGs8cd8eXlYairZYqMddH13O
Static task
static1
Behavioral task
behavioral1
Sample
69e911d6f0942e1f72e2d9b976d0a23c6dbdf9a568f1274ad6aeb70330d93563.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
69e911d6f0942e1f72e2d9b976d0a23c6dbdf9a568f1274ad6aeb70330d93563
-
Size
96KB
-
MD5
a328aa3fd251b34ef2f6b5792ceca650
-
SHA1
76d9c111bbbda4288ec3321304353597d68150d7
-
SHA256
69e911d6f0942e1f72e2d9b976d0a23c6dbdf9a568f1274ad6aeb70330d93563
-
SHA512
b21b63f526df378d8b6a7309f27d7175860a2ecfedb4395f25654267894ede5fa343ac23a0c4bb2d6cbdfda7f2982795251eec65b9cae05d4f28ddac2f20a2e7
-
SSDEEP
1536:nnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:nGs8cd8eXlYairZYqMddH13O
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-