General
-
Target
61dd378d367e57da5b8c45ff9c83ee4f0305dd9d4244a649c598457260e211f0N.exe
-
Size
96KB
-
Sample
250125-hpsn6s1may
-
MD5
95a659337ba9854552afc655c14415c0
-
SHA1
d1698c372887ff93d1bdb37cdb9437b86559e961
-
SHA256
61dd378d367e57da5b8c45ff9c83ee4f0305dd9d4244a649c598457260e211f0
-
SHA512
ef08e6157d7e84571f7accafa96b64fc8e144b72bac4a4c968be875a555470ff74347510b723bf9279b3b7f2867189f3ddddccd5ec500f34ebbe086fe5b9f999
-
SSDEEP
1536:fnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:fGs8cd8eXlYairZYqMddH13z
Static task
static1
Behavioral task
behavioral1
Sample
61dd378d367e57da5b8c45ff9c83ee4f0305dd9d4244a649c598457260e211f0N.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
61dd378d367e57da5b8c45ff9c83ee4f0305dd9d4244a649c598457260e211f0N.exe
-
Size
96KB
-
MD5
95a659337ba9854552afc655c14415c0
-
SHA1
d1698c372887ff93d1bdb37cdb9437b86559e961
-
SHA256
61dd378d367e57da5b8c45ff9c83ee4f0305dd9d4244a649c598457260e211f0
-
SHA512
ef08e6157d7e84571f7accafa96b64fc8e144b72bac4a4c968be875a555470ff74347510b723bf9279b3b7f2867189f3ddddccd5ec500f34ebbe086fe5b9f999
-
SSDEEP
1536:fnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:fGs8cd8eXlYairZYqMddH13z
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-