General
-
Target
adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968
-
Size
96KB
-
Sample
250118-jx9hbsylam
-
MD5
e347ccf3742fa70307a7a15f108b0494
-
SHA1
ca8b2f143293076f00a32caf1fa0694e3808c557
-
SHA256
adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968
-
SHA512
cf4a22c0c945d6bc98df0f1b7e89fe8d307c365a8451d78e377bb6e1965c87004af5d491e6189701569ab3323ee5629fb2c50df105ecb4700d264dcd30179d3b
-
SSDEEP
1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:LGs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968
-
Size
96KB
-
MD5
e347ccf3742fa70307a7a15f108b0494
-
SHA1
ca8b2f143293076f00a32caf1fa0694e3808c557
-
SHA256
adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968
-
SHA512
cf4a22c0c945d6bc98df0f1b7e89fe8d307c365a8451d78e377bb6e1965c87004af5d491e6189701569ab3323ee5629fb2c50df105ecb4700d264dcd30179d3b
-
SSDEEP
1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:LGs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-