Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4dde36502dc77fbcc5cb3d22d0c2b450_NeikiAnalytics

  • Size

    89KB

  • Sample

    240511-bz5cdsdh4w

  • MD5

    4dde36502dc77fbcc5cb3d22d0c2b450

  • SHA1

    a9f891e3f72ab1848bdb2d324bdb5aa56e586930

  • SHA256

    c8d66f81fb6872e9a575e3d9c96d74dc656884c5af212431c3ce03b6519c1796

  • SHA512

    97a887c89c96902445b8a034dc063e4cf1c0b77a5558fcffd2bae0a5826a69b85b273ae09f911c0dac7b48a76153b4a952530b4838a1cc1e9d3f30df426a7c21

  • SSDEEP

    768:+MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:+bIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4dde36502dc77fbcc5cb3d22d0c2b450_NeikiAnalytics

    • Size

      89KB

    • MD5

      4dde36502dc77fbcc5cb3d22d0c2b450

    • SHA1

      a9f891e3f72ab1848bdb2d324bdb5aa56e586930

    • SHA256

      c8d66f81fb6872e9a575e3d9c96d74dc656884c5af212431c3ce03b6519c1796

    • SHA512

      97a887c89c96902445b8a034dc063e4cf1c0b77a5558fcffd2bae0a5826a69b85b273ae09f911c0dac7b48a76153b4a952530b4838a1cc1e9d3f30df426a7c21

    • SSDEEP

      768:+MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:+bIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks