Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    afb5be689febe917284432160f9f741268793b17824edadb30cb3ec6c35d7b57

  • Size

    316KB

  • Sample

    241005-ckezmatdmc

  • MD5

    814601988847d04f0b57fc7d572f1910

  • SHA1

    f0cc3b1d567e999225dccf6b09b53cf207808444

  • SHA256

    afb5be689febe917284432160f9f741268793b17824edadb30cb3ec6c35d7b57

  • SHA512

    cb9e6eae9a6ceebaa807d8637a703354ce5261d683d3657ce154fc0ac54a3a491f88fec0567bbdfef32c878c402c2cc21050636d71859aecf8bcd541ee1b1807

  • SSDEEP

    1536:U4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:UIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      afb5be689febe917284432160f9f741268793b17824edadb30cb3ec6c35d7b57

    • Size

      316KB

    • MD5

      814601988847d04f0b57fc7d572f1910

    • SHA1

      f0cc3b1d567e999225dccf6b09b53cf207808444

    • SHA256

      afb5be689febe917284432160f9f741268793b17824edadb30cb3ec6c35d7b57

    • SHA512

      cb9e6eae9a6ceebaa807d8637a703354ce5261d683d3657ce154fc0ac54a3a491f88fec0567bbdfef32c878c402c2cc21050636d71859aecf8bcd541ee1b1807

    • SSDEEP

      1536:U4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:UIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks