General
-
Target
b93402cbc7cb95517482acf086b8aa8fc06edd8f10e199f86d500ee62e3bee08.exe
-
Size
96KB
-
Sample
250115-2v37mszmhq
-
MD5
bb3015f0deec5703b41f72f1801b7cb3
-
SHA1
2ae404f298b282bd26d6a6529cc18539f87c690a
-
SHA256
b93402cbc7cb95517482acf086b8aa8fc06edd8f10e199f86d500ee62e3bee08
-
SHA512
05dee2ec3e405164b94d99d3a04db084bab07661b1c9266f6d788ea80995510998f4ea9752db52389f019f3ccfd14686f4ecbb8b361a8fe979b20203be93d8aa
-
SSDEEP
1536:onAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:oGs8cd8eXlYairZYqMddH13R
Static task
static1
Behavioral task
behavioral1
Sample
b93402cbc7cb95517482acf086b8aa8fc06edd8f10e199f86d500ee62e3bee08.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
b93402cbc7cb95517482acf086b8aa8fc06edd8f10e199f86d500ee62e3bee08.exe
-
Size
96KB
-
MD5
bb3015f0deec5703b41f72f1801b7cb3
-
SHA1
2ae404f298b282bd26d6a6529cc18539f87c690a
-
SHA256
b93402cbc7cb95517482acf086b8aa8fc06edd8f10e199f86d500ee62e3bee08
-
SHA512
05dee2ec3e405164b94d99d3a04db084bab07661b1c9266f6d788ea80995510998f4ea9752db52389f019f3ccfd14686f4ecbb8b361a8fe979b20203be93d8aa
-
SSDEEP
1536:onAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:oGs8cd8eXlYairZYqMddH13R
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-