General
-
Target
fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d
-
Size
96KB
-
Sample
250207-hzf35atjdy
-
MD5
aa88acfb7a9968aa6855bdcd044b8bad
-
SHA1
95d1dfdade216b01efe0cfd38445619180da0a82
-
SHA256
fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d
-
SHA512
6220d7d5c6cbd78c114e542e1374d69017ea35535056aef2a7e1fff42cff430ce269a0f3c94ae1fc96d1f34776181e835b86fac543f8db58efa5b14161550891
-
SSDEEP
1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:kGs8cd8eXlYairZYqMddH13b
Static task
static1
Behavioral task
behavioral1
Sample
fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d.exe
Resource
win7-20241010-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d
-
Size
96KB
-
MD5
aa88acfb7a9968aa6855bdcd044b8bad
-
SHA1
95d1dfdade216b01efe0cfd38445619180da0a82
-
SHA256
fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d
-
SHA512
6220d7d5c6cbd78c114e542e1374d69017ea35535056aef2a7e1fff42cff430ce269a0f3c94ae1fc96d1f34776181e835b86fac543f8db58efa5b14161550891
-
SSDEEP
1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:kGs8cd8eXlYairZYqMddH13b
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-