Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    842e91e41d43d926736d4b413adf33fdf251882c4055b51db96820bc82ade3ce

  • Size

    76KB

  • Sample

    240825-bhds4s1fqn

  • MD5

    8ae135900ab66c987e875879ef79c12f

  • SHA1

    c4c924e2d239cf9ab476744bda5990e106dd8ea2

  • SHA256

    842e91e41d43d926736d4b413adf33fdf251882c4055b51db96820bc82ade3ce

  • SHA512

    52abaa24a708d60ff96a35c23998cdd5f5f819b41848d38cf98c54cbad66aa7e9498fed4a46d774df1ea58a5542f7eb3c7abe7b38cacd302ebec5ea7309a27f9

  • SSDEEP

    1536:Yd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:odseIOKEZEyF6EOFqTiQm5l/5s11

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      842e91e41d43d926736d4b413adf33fdf251882c4055b51db96820bc82ade3ce

    • Size

      76KB

    • MD5

      8ae135900ab66c987e875879ef79c12f

    • SHA1

      c4c924e2d239cf9ab476744bda5990e106dd8ea2

    • SHA256

      842e91e41d43d926736d4b413adf33fdf251882c4055b51db96820bc82ade3ce

    • SHA512

      52abaa24a708d60ff96a35c23998cdd5f5f819b41848d38cf98c54cbad66aa7e9498fed4a46d774df1ea58a5542f7eb3c7abe7b38cacd302ebec5ea7309a27f9

    • SSDEEP

      1536:Yd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:odseIOKEZEyF6EOFqTiQm5l/5s11

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks