General
-
Target
30ffcee02f052119d3c030a12ac8133bca285e90e1fcaec61473cbf07e859ac6N.exe
-
Size
134KB
-
Sample
250103-s2fv9atqam
-
MD5
af5922b2a0fe5629a03231e9b22004d0
-
SHA1
3f2787307b8485d8dc43ad0a1a7bff05a01eec2a
-
SHA256
30ffcee02f052119d3c030a12ac8133bca285e90e1fcaec61473cbf07e859ac6
-
SHA512
19c258c9b424fcf84a53065d906f093e2b69607c3d0cecfca0f2814f12b91318bf71848d04b7081f8f7c2492d0d9d62358fae44ea285ec6ca368de8fe51296c6
-
SSDEEP
1536:aDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:8iRTeH0iqAW6J6f1tqF6dngNmaZCia
Static task
static1
Behavioral task
behavioral1
Sample
30ffcee02f052119d3c030a12ac8133bca285e90e1fcaec61473cbf07e859ac6N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
30ffcee02f052119d3c030a12ac8133bca285e90e1fcaec61473cbf07e859ac6N.exe
-
Size
134KB
-
MD5
af5922b2a0fe5629a03231e9b22004d0
-
SHA1
3f2787307b8485d8dc43ad0a1a7bff05a01eec2a
-
SHA256
30ffcee02f052119d3c030a12ac8133bca285e90e1fcaec61473cbf07e859ac6
-
SHA512
19c258c9b424fcf84a53065d906f093e2b69607c3d0cecfca0f2814f12b91318bf71848d04b7081f8f7c2492d0d9d62358fae44ea285ec6ca368de8fe51296c6
-
SSDEEP
1536:aDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:8iRTeH0iqAW6J6f1tqF6dngNmaZCia
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-