General
-
Target
4a2ca3c114f531ca92a473baa90e58db64ab82aa4d46b5c80b73919bdc58a44b
-
Size
96KB
-
Sample
250125-2mgcxaspcz
-
MD5
caff68d1ce976183d427be836e7c540b
-
SHA1
a7f2d1426da3edb09ce2d05a725571fb8be3b093
-
SHA256
4a2ca3c114f531ca92a473baa90e58db64ab82aa4d46b5c80b73919bdc58a44b
-
SHA512
9f2fa1ab554ebb5b530345bdfa82e62e63e2cec8c78c07d9246723557c38354fc387e022d36dc1496c60eaaf40f7cb60a73a98d1d9c6b9cd5c317c6335b4a543
-
SSDEEP
1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:jGs8cd8eXlYairZYqMddH13r
Static task
static1
Behavioral task
behavioral1
Sample
4a2ca3c114f531ca92a473baa90e58db64ab82aa4d46b5c80b73919bdc58a44b.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
4a2ca3c114f531ca92a473baa90e58db64ab82aa4d46b5c80b73919bdc58a44b
-
Size
96KB
-
MD5
caff68d1ce976183d427be836e7c540b
-
SHA1
a7f2d1426da3edb09ce2d05a725571fb8be3b093
-
SHA256
4a2ca3c114f531ca92a473baa90e58db64ab82aa4d46b5c80b73919bdc58a44b
-
SHA512
9f2fa1ab554ebb5b530345bdfa82e62e63e2cec8c78c07d9246723557c38354fc387e022d36dc1496c60eaaf40f7cb60a73a98d1d9c6b9cd5c317c6335b4a543
-
SSDEEP
1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:jGs8cd8eXlYairZYqMddH13r
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-