General
-
Target
0caa9c5b37c8bfa49576d4e3e9d739650f9f79b51519bb9840462bcb142430beN.exe
-
Size
96KB
-
Sample
250201-r1g69awnfv
-
MD5
b9173234f4b162cbf72c6f313eb81810
-
SHA1
656b03c93268845cec34e5eeb82076163a166673
-
SHA256
0caa9c5b37c8bfa49576d4e3e9d739650f9f79b51519bb9840462bcb142430be
-
SHA512
858e49e6cf15c7675f620a2fd2d54bc84f33d635de8569fa9af810e7a2169c393a88e9a1548b285a118b269c7752214c6bc0411193797271b8badcb2d81390b0
-
SSDEEP
1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:MGs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
0caa9c5b37c8bfa49576d4e3e9d739650f9f79b51519bb9840462bcb142430beN.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
0caa9c5b37c8bfa49576d4e3e9d739650f9f79b51519bb9840462bcb142430beN.exe
-
Size
96KB
-
MD5
b9173234f4b162cbf72c6f313eb81810
-
SHA1
656b03c93268845cec34e5eeb82076163a166673
-
SHA256
0caa9c5b37c8bfa49576d4e3e9d739650f9f79b51519bb9840462bcb142430be
-
SHA512
858e49e6cf15c7675f620a2fd2d54bc84f33d635de8569fa9af810e7a2169c393a88e9a1548b285a118b269c7752214c6bc0411193797271b8badcb2d81390b0
-
SSDEEP
1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:MGs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-