General
-
Target
1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98.exe
-
Size
96KB
-
Sample
250202-ap12jsxjcw
-
MD5
06f9986e4fd70ec310d913a22795d5c4
-
SHA1
c0e06f7d1584e7f67647830aabf325511ec17e14
-
SHA256
1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98
-
SHA512
26d793ae3715a2c9efac88fe48238213a2b42ebbf72e5422504318e8a5379b52f6d4467ef113a83ac8f5e341443303c3d6776842cf8c55efd770ecd96368913a
-
SSDEEP
1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:TGs8cd8eXlYairZYqMddH13j
Static task
static1
Behavioral task
behavioral1
Sample
1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98.exe
-
Size
96KB
-
MD5
06f9986e4fd70ec310d913a22795d5c4
-
SHA1
c0e06f7d1584e7f67647830aabf325511ec17e14
-
SHA256
1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98
-
SHA512
26d793ae3715a2c9efac88fe48238213a2b42ebbf72e5422504318e8a5379b52f6d4467ef113a83ac8f5e341443303c3d6776842cf8c55efd770ecd96368913a
-
SSDEEP
1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:TGs8cd8eXlYairZYqMddH13j
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-