Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a204f9dedf0dd81629ada4ff71a138c0N

  • Size

    61KB

  • Sample

    240912-bhx7ratark

  • MD5

    a204f9dedf0dd81629ada4ff71a138c0

  • SHA1

    5967412ecf216707518350a9fa8432f53f3d0b66

  • SHA256

    b3019d1fa0edf00d681239298dacd606d007d03f47eb7941d7c8b10caa1706c1

  • SHA512

    060d2367f7fab9e6176c41a874c8cf6dba8706312b7a588e944c9938c7934135513274a186dc36e738d797ed50b14bda28e6f0600e43f896e539290c8841c343

  • SSDEEP

    768:JMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:JbIvYvZEyFKF6N4yS+AQmZIl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a204f9dedf0dd81629ada4ff71a138c0N

    • Size

      61KB

    • MD5

      a204f9dedf0dd81629ada4ff71a138c0

    • SHA1

      5967412ecf216707518350a9fa8432f53f3d0b66

    • SHA256

      b3019d1fa0edf00d681239298dacd606d007d03f47eb7941d7c8b10caa1706c1

    • SHA512

      060d2367f7fab9e6176c41a874c8cf6dba8706312b7a588e944c9938c7934135513274a186dc36e738d797ed50b14bda28e6f0600e43f896e539290c8841c343

    • SSDEEP

      768:JMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:JbIvYvZEyFKF6N4yS+AQmZIl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks