General
-
Target
JaffaCakes118_0ff481dcf160a2df65900a40f319a840
-
Size
128KB
-
Sample
250221-d27lmsslap
-
MD5
0ff481dcf160a2df65900a40f319a840
-
SHA1
ce00bb90c9b36333b521981a7a03ac01a21be2d3
-
SHA256
80bc785db01bf1399053f97e4f8bf368c2c177be243c33bccd2091df55ae2e52
-
SHA512
e1d02bfcb7a53097439dd519804fed1fa7efab881ba56470daaf8b2b66ef1204d72b1e4feec77506a080b197c58a53626e9ae7a320c756d933f94831e8731c45
-
SSDEEP
1536:3DfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:TiRTe3n8BMAW6J6f1tqF6dngNmaZrN
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0ff481dcf160a2df65900a40f319a840.exe
Resource
win7-20240729-en
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Targets
-
-
Target
JaffaCakes118_0ff481dcf160a2df65900a40f319a840
-
Size
128KB
-
MD5
0ff481dcf160a2df65900a40f319a840
-
SHA1
ce00bb90c9b36333b521981a7a03ac01a21be2d3
-
SHA256
80bc785db01bf1399053f97e4f8bf368c2c177be243c33bccd2091df55ae2e52
-
SHA512
e1d02bfcb7a53097439dd519804fed1fa7efab881ba56470daaf8b2b66ef1204d72b1e4feec77506a080b197c58a53626e9ae7a320c756d933f94831e8731c45
-
SSDEEP
1536:3DfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:TiRTe3n8BMAW6J6f1tqF6dngNmaZrN
-
Neconyd family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-