General
-
Target
19109267c40fdffcb60d1b0351989d4db980dac738831fbcffd0a421ad72a096
-
Size
96KB
-
Sample
250110-zhr8hawpew
-
MD5
b6c11374a70c8c650f8555c2e6a77acc
-
SHA1
d3c3a0de61b638e44e9372315193b8f342af5914
-
SHA256
19109267c40fdffcb60d1b0351989d4db980dac738831fbcffd0a421ad72a096
-
SHA512
acbe633c216b2e7851af349492c8985c1467bbdfad64183cf62e0dc8f6ff785b221a06d1591b7fdd4d2fc757d2fe43cca61c9a95f9dbd81461ea6f1244b46d81
-
SSDEEP
1536:DnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:DGs8cd8eXlYairZYqMddH13z
Static task
static1
Behavioral task
behavioral1
Sample
19109267c40fdffcb60d1b0351989d4db980dac738831fbcffd0a421ad72a096.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
19109267c40fdffcb60d1b0351989d4db980dac738831fbcffd0a421ad72a096
-
Size
96KB
-
MD5
b6c11374a70c8c650f8555c2e6a77acc
-
SHA1
d3c3a0de61b638e44e9372315193b8f342af5914
-
SHA256
19109267c40fdffcb60d1b0351989d4db980dac738831fbcffd0a421ad72a096
-
SHA512
acbe633c216b2e7851af349492c8985c1467bbdfad64183cf62e0dc8f6ff785b221a06d1591b7fdd4d2fc757d2fe43cca61c9a95f9dbd81461ea6f1244b46d81
-
SSDEEP
1536:DnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:DGs8cd8eXlYairZYqMddH13z
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-