General
-
Target
d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636.exe
-
Size
96KB
-
Sample
250108-ldke7swnfl
-
MD5
471f49e3fe485b7ed02e5a754744f855
-
SHA1
23b95ccf3e5a579680dad54f63148b1a66d7a0f4
-
SHA256
d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636
-
SHA512
bba8483e9704f18381404d1ea94899277bb0c9a5c1dd90725655582674c54d3811b4c4504356611e699c36274d0b75c4e0742b003b65af7126eb840894a041ef
-
SSDEEP
1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:vGs8cd8eXlYairZYqMddH13x
Static task
static1
Behavioral task
behavioral1
Sample
d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636.exe
-
Size
96KB
-
MD5
471f49e3fe485b7ed02e5a754744f855
-
SHA1
23b95ccf3e5a579680dad54f63148b1a66d7a0f4
-
SHA256
d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636
-
SHA512
bba8483e9704f18381404d1ea94899277bb0c9a5c1dd90725655582674c54d3811b4c4504356611e699c36274d0b75c4e0742b003b65af7126eb840894a041ef
-
SSDEEP
1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:vGs8cd8eXlYairZYqMddH13x
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-