General
-
Target
89b1b832522bf9f7c6f0acd9ed7c1f4bb0a5b10c0dae10a3312d48fa72decd03N.exe
-
Size
134KB
-
Sample
241231-acfvvavpcm
-
MD5
d0cc2fbc746b4faaa3a62c8c3a4250e0
-
SHA1
f546e2be5ec764db8f258d101b80408b2873d707
-
SHA256
89b1b832522bf9f7c6f0acd9ed7c1f4bb0a5b10c0dae10a3312d48fa72decd03
-
SHA512
daf0d06cca896339410182bf3edceb04e21393f74f2af4e6551042f463486002a40719451bcb253684dfd029a8d3a4197a29dc5f0c85b0c23d05191bac04d0cc
-
SSDEEP
1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCil:hiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
Static task
static1
Behavioral task
behavioral1
Sample
89b1b832522bf9f7c6f0acd9ed7c1f4bb0a5b10c0dae10a3312d48fa72decd03N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
89b1b832522bf9f7c6f0acd9ed7c1f4bb0a5b10c0dae10a3312d48fa72decd03N.exe
-
Size
134KB
-
MD5
d0cc2fbc746b4faaa3a62c8c3a4250e0
-
SHA1
f546e2be5ec764db8f258d101b80408b2873d707
-
SHA256
89b1b832522bf9f7c6f0acd9ed7c1f4bb0a5b10c0dae10a3312d48fa72decd03
-
SHA512
daf0d06cca896339410182bf3edceb04e21393f74f2af4e6551042f463486002a40719451bcb253684dfd029a8d3a4197a29dc5f0c85b0c23d05191bac04d0cc
-
SSDEEP
1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCil:hiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-