General
-
Target
a2e2a7bf237176b590ae010057a1db34f0019763c675b66c950f8f98dfa5d8e7.exe
-
Size
96KB
-
Sample
250123-m265jsynal
-
MD5
3741f3d1409a19365929b6bd1dee01d6
-
SHA1
da584cee4bebddcd5f48bb30c883c8950b5e160d
-
SHA256
a2e2a7bf237176b590ae010057a1db34f0019763c675b66c950f8f98dfa5d8e7
-
SHA512
37a764e84764ebf79138ea4cfa70d72ffd351d4ba3b8d23c97510452b7712bb15c7dda8f6189e69e19c8ae1bc06aa4f42eb299213a6d9b110ce75607d453e9e5
-
SSDEEP
1536:xnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:xGs8cd8eXlYairZYqMddH13J
Static task
static1
Behavioral task
behavioral1
Sample
a2e2a7bf237176b590ae010057a1db34f0019763c675b66c950f8f98dfa5d8e7.exe
Resource
win7-20240729-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
a2e2a7bf237176b590ae010057a1db34f0019763c675b66c950f8f98dfa5d8e7.exe
-
Size
96KB
-
MD5
3741f3d1409a19365929b6bd1dee01d6
-
SHA1
da584cee4bebddcd5f48bb30c883c8950b5e160d
-
SHA256
a2e2a7bf237176b590ae010057a1db34f0019763c675b66c950f8f98dfa5d8e7
-
SHA512
37a764e84764ebf79138ea4cfa70d72ffd351d4ba3b8d23c97510452b7712bb15c7dda8f6189e69e19c8ae1bc06aa4f42eb299213a6d9b110ce75607d453e9e5
-
SSDEEP
1536:xnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:xGs8cd8eXlYairZYqMddH13J
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-