Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.541c7...70.exe

windows7-x64

10

NEAS.541c7...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.541c7d11f0f3739d35437153c4329670.exe

  • Size

    134KB

  • Sample

    231031-3tyq7shf92

  • MD5

    541c7d11f0f3739d35437153c4329670

  • SHA1

    0046e4b6cb3b1f579d01df55877dcf5cf9ef59d4

  • SHA256

    9e2f32e6a66f3f6a79928ba8b77e411b64dbe3377f27a264c7931e7f58d80bf0

  • SHA512

    26a51dfe3ebdf96c217c1b80a3983f0dbfe8bbd891b14bf830226ff18842bc14357f776af3069cd17bf204f20829fe7f04fd00cbcd381ed41cb83f409b4048fe

  • SSDEEP

    1536:hDfDbhERTatPLTH0NqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwC7M:BiRTeH0NqAW6J6f1tqF6dngNmaZC7M

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.541c7d11f0f3739d35437153c4329670.exe

    • Size

      134KB

    • MD5

      541c7d11f0f3739d35437153c4329670

    • SHA1

      0046e4b6cb3b1f579d01df55877dcf5cf9ef59d4

    • SHA256

      9e2f32e6a66f3f6a79928ba8b77e411b64dbe3377f27a264c7931e7f58d80bf0

    • SHA512

      26a51dfe3ebdf96c217c1b80a3983f0dbfe8bbd891b14bf830226ff18842bc14357f776af3069cd17bf204f20829fe7f04fd00cbcd381ed41cb83f409b4048fe

    • SSDEEP

      1536:hDfDbhERTatPLTH0NqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwC7M:BiRTeH0NqAW6J6f1tqF6dngNmaZC7M

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks