General
-
Target
1a44491707c45f4f2c40c4796c8eee537267e1a55d9e93e1445f1bb350bd6263N.exe
-
Size
96KB
-
Sample
250205-l851dstlar
-
MD5
c05aa5ddaa2ad216812b20ac9263b4f0
-
SHA1
317ba3deee0e68f8396530f2bbb9cc4bcb069291
-
SHA256
1a44491707c45f4f2c40c4796c8eee537267e1a55d9e93e1445f1bb350bd6263
-
SHA512
c433489214638bc0b612bcf3fb7a8e067ec3243b48b0ec5bd98550b63db7e52c068d493c002f925b36d35f88d700718cbb7b50cb29dba81801a7eb7b5ffad5ac
-
SSDEEP
1536:nnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:nGs8cd8eXlYairZYqMddH13L
Static task
static1
Behavioral task
behavioral1
Sample
1a44491707c45f4f2c40c4796c8eee537267e1a55d9e93e1445f1bb350bd6263N.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
1a44491707c45f4f2c40c4796c8eee537267e1a55d9e93e1445f1bb350bd6263N.exe
-
Size
96KB
-
MD5
c05aa5ddaa2ad216812b20ac9263b4f0
-
SHA1
317ba3deee0e68f8396530f2bbb9cc4bcb069291
-
SHA256
1a44491707c45f4f2c40c4796c8eee537267e1a55d9e93e1445f1bb350bd6263
-
SHA512
c433489214638bc0b612bcf3fb7a8e067ec3243b48b0ec5bd98550b63db7e52c068d493c002f925b36d35f88d700718cbb7b50cb29dba81801a7eb7b5ffad5ac
-
SSDEEP
1536:nnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:nGs8cd8eXlYairZYqMddH13L
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-