General
-
Target
e3ed237dcfe4eec0c76c8cb244887064226ab99cf7ee2c7fa7b5899c69359eadN
-
Size
134KB
-
Sample
250113-gan7rsyjdx
-
MD5
7f22c9c284b4cb5cca87ad679107e010
-
SHA1
246f2beb44f05b708b3c102bad5bd2f95b319b43
-
SHA256
e3ed237dcfe4eec0c76c8cb244887064226ab99cf7ee2c7fa7b5899c69359ead
-
SHA512
6174a15c772b7868be6ace49cb4a0180a68cfb3968dd241aaa3f0920dabd452f9e5a771cfc9462205e1fbf6af4bc368d2d80e1357814190d3ebabed05d22a3e3
-
SSDEEP
1536:GDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:4iRTeH0iqAW6J6f1tqF6dngNmaZCia
Static task
static1
Behavioral task
behavioral1
Sample
e3ed237dcfe4eec0c76c8cb244887064226ab99cf7ee2c7fa7b5899c69359eadN.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
e3ed237dcfe4eec0c76c8cb244887064226ab99cf7ee2c7fa7b5899c69359eadN
-
Size
134KB
-
MD5
7f22c9c284b4cb5cca87ad679107e010
-
SHA1
246f2beb44f05b708b3c102bad5bd2f95b319b43
-
SHA256
e3ed237dcfe4eec0c76c8cb244887064226ab99cf7ee2c7fa7b5899c69359ead
-
SHA512
6174a15c772b7868be6ace49cb4a0180a68cfb3968dd241aaa3f0920dabd452f9e5a771cfc9462205e1fbf6af4bc368d2d80e1357814190d3ebabed05d22a3e3
-
SSDEEP
1536:GDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:4iRTeH0iqAW6J6f1tqF6dngNmaZCia
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-