General
-
Target
813bd52d23f1d483921ee2d2c667ebab1c7a8df0f17bfa78534b80699752353c.exe
-
Size
96KB
-
Sample
250202-jgf6va1rhw
-
MD5
7fcd7e5707d004b75fb0760d1e26bb82
-
SHA1
0f7a4d3519bb949d4ce79640c88104acd4cabd10
-
SHA256
813bd52d23f1d483921ee2d2c667ebab1c7a8df0f17bfa78534b80699752353c
-
SHA512
4a678ace5c8cc26ca5b01cfa22be29de5c46479ce2c3b678f303a18ff0547233b0a7d12ac4f4e56cb4770c202d09a12a5beb47150c73164c5b6cda540e2f512a
-
SSDEEP
1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:uGs8cd8eXlYairZYqMddH13j
Static task
static1
Behavioral task
behavioral1
Sample
813bd52d23f1d483921ee2d2c667ebab1c7a8df0f17bfa78534b80699752353c.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
813bd52d23f1d483921ee2d2c667ebab1c7a8df0f17bfa78534b80699752353c.exe
-
Size
96KB
-
MD5
7fcd7e5707d004b75fb0760d1e26bb82
-
SHA1
0f7a4d3519bb949d4ce79640c88104acd4cabd10
-
SHA256
813bd52d23f1d483921ee2d2c667ebab1c7a8df0f17bfa78534b80699752353c
-
SHA512
4a678ace5c8cc26ca5b01cfa22be29de5c46479ce2c3b678f303a18ff0547233b0a7d12ac4f4e56cb4770c202d09a12a5beb47150c73164c5b6cda540e2f512a
-
SSDEEP
1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:uGs8cd8eXlYairZYqMddH13j
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-