General
-
Target
a5f9a9723f445f7ecff9e5756004a81c8d7c35370fc1b721ac6285c7f4010868.exe
-
Size
96KB
-
Sample
250212-mvcmcsxrdk
-
MD5
90b637875a749ac270736af19984375b
-
SHA1
11b094408ee9254e527e8a778e3e384d3ac12ec7
-
SHA256
a5f9a9723f445f7ecff9e5756004a81c8d7c35370fc1b721ac6285c7f4010868
-
SHA512
44b0535f2118b0f1b0d91809e557ad01cadbdf1917e34f39b13542375f7b3132e5da8d88b63c833aeada839670db5871219b0cafcbf6a9f41ae1e86c3c70e603
-
SSDEEP
1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:SGs8cd8eXlYairZYqMddH13R
Static task
static1
Behavioral task
behavioral1
Sample
a5f9a9723f445f7ecff9e5756004a81c8d7c35370fc1b721ac6285c7f4010868.exe
Resource
win7-20240903-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
a5f9a9723f445f7ecff9e5756004a81c8d7c35370fc1b721ac6285c7f4010868.exe
-
Size
96KB
-
MD5
90b637875a749ac270736af19984375b
-
SHA1
11b094408ee9254e527e8a778e3e384d3ac12ec7
-
SHA256
a5f9a9723f445f7ecff9e5756004a81c8d7c35370fc1b721ac6285c7f4010868
-
SHA512
44b0535f2118b0f1b0d91809e557ad01cadbdf1917e34f39b13542375f7b3132e5da8d88b63c833aeada839670db5871219b0cafcbf6a9f41ae1e86c3c70e603
-
SSDEEP
1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:SGs8cd8eXlYairZYqMddH13R
-
Neconyd family
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-