General
-
Target
2b3c58de317edf4f288967b96f05eed279c862adaa73f31540de18ad3b33ab74
-
Size
134KB
-
Sample
250204-zty57aske1
-
MD5
fa495b1e5ff529bc17284855a046deea
-
SHA1
3da744e498994df1280c111c8f6aa9a9ccc8cb4e
-
SHA256
2b3c58de317edf4f288967b96f05eed279c862adaa73f31540de18ad3b33ab74
-
SHA512
509ceeab9958a0394bec6476ec1f41ad99b1120bbdf90081d0c551a52040506ce72a18632091be1682eade119f7c4258c468e29428d4182c2d7cd7a037ae1450
-
SSDEEP
1536:tDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:9iRTeH0iqAW6J6f1tqF6dngNmaZCia
Static task
static1
Behavioral task
behavioral1
Sample
2b3c58de317edf4f288967b96f05eed279c862adaa73f31540de18ad3b33ab74.exe
Resource
win7-20241023-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
2b3c58de317edf4f288967b96f05eed279c862adaa73f31540de18ad3b33ab74
-
Size
134KB
-
MD5
fa495b1e5ff529bc17284855a046deea
-
SHA1
3da744e498994df1280c111c8f6aa9a9ccc8cb4e
-
SHA256
2b3c58de317edf4f288967b96f05eed279c862adaa73f31540de18ad3b33ab74
-
SHA512
509ceeab9958a0394bec6476ec1f41ad99b1120bbdf90081d0c551a52040506ce72a18632091be1682eade119f7c4258c468e29428d4182c2d7cd7a037ae1450
-
SSDEEP
1536:tDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:9iRTeH0iqAW6J6f1tqF6dngNmaZCia
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-