General
-
Target
28f731600eedc07ebf8d60faa7d4322d4a5f2bde6d8f3394616f0f6d74de4ad3.exe
-
Size
134KB
-
Sample
250119-r2cm6asndj
-
MD5
f4b1adc0184021c94cf8384a1d29ac30
-
SHA1
092c451b993486aff776c87a6bfaea0249c1f29f
-
SHA256
28f731600eedc07ebf8d60faa7d4322d4a5f2bde6d8f3394616f0f6d74de4ad3
-
SHA512
5dd1bd77fd58fdaf641f52d0cb9947fccf07a512870381eda0a2a9d96b5951a931ee4e81300e2e3628e24662ca55298b4d71de7f1cc5353fe8f0fd0659d5180d
-
SSDEEP
1536:8DfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCif:iiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
Static task
static1
Behavioral task
behavioral1
Sample
28f731600eedc07ebf8d60faa7d4322d4a5f2bde6d8f3394616f0f6d74de4ad3.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
28f731600eedc07ebf8d60faa7d4322d4a5f2bde6d8f3394616f0f6d74de4ad3.exe
-
Size
134KB
-
MD5
f4b1adc0184021c94cf8384a1d29ac30
-
SHA1
092c451b993486aff776c87a6bfaea0249c1f29f
-
SHA256
28f731600eedc07ebf8d60faa7d4322d4a5f2bde6d8f3394616f0f6d74de4ad3
-
SHA512
5dd1bd77fd58fdaf641f52d0cb9947fccf07a512870381eda0a2a9d96b5951a931ee4e81300e2e3628e24662ca55298b4d71de7f1cc5353fe8f0fd0659d5180d
-
SSDEEP
1536:8DfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCif:iiRTeH0iqAW6J6f1tqF6dngNmaZCiaI
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-