General
-
Target
JaffaCakes118_01b36e0afa6cf15ee49ba2c56994f33f
-
Size
128KB
-
Sample
250121-dv8v5atngx
-
MD5
01b36e0afa6cf15ee49ba2c56994f33f
-
SHA1
d3449d903ff8473fd6efd34808f7cb0802a7d3ef
-
SHA256
17c155d38b7255f10a57d43f44014dd6d0b1c28201e62db9c08d39e10ef064c6
-
SHA512
530b75c4052de6c7d1b5d6b0a34a4007a19efc31c52682625c079bd51847c97d1e200b9bdeadd923af3064a53c7ae365e4a32b124e60c42fd11682788293d9c2
-
SSDEEP
1536:GDfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:4iRTe3n8BMAW6J6f1tqF6dngNmaZrN
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_01b36e0afa6cf15ee49ba2c56994f33f.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
JaffaCakes118_01b36e0afa6cf15ee49ba2c56994f33f
-
Size
128KB
-
MD5
01b36e0afa6cf15ee49ba2c56994f33f
-
SHA1
d3449d903ff8473fd6efd34808f7cb0802a7d3ef
-
SHA256
17c155d38b7255f10a57d43f44014dd6d0b1c28201e62db9c08d39e10ef064c6
-
SHA512
530b75c4052de6c7d1b5d6b0a34a4007a19efc31c52682625c079bd51847c97d1e200b9bdeadd923af3064a53c7ae365e4a32b124e60c42fd11682788293d9c2
-
SSDEEP
1536:GDfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:4iRTe3n8BMAW6J6f1tqF6dngNmaZrN
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-