Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42df003a9d56c1271b060686c57443beeca03aeb90f6f34185cbacadfca09037N.exe

  • Size

    88KB

  • Sample

    241218-ddfg9a1nbr

  • MD5

    ad189b1ecc0e43a88777dd208ccadb50

  • SHA1

    eed594eb3de0728dbc2b4697478eb67e27c6217a

  • SHA256

    42df003a9d56c1271b060686c57443beeca03aeb90f6f34185cbacadfca09037

  • SHA512

    2e4353eb883bc23d3b0b1852234ca01d001e5a54a3b07a8be569209903767d663f77f4f81abfe8bb98fbf32aa282c5d6bcf3607c7867ce4e1959036f83380bf4

  • SSDEEP

    1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:9dseIOMEZEyFjEOFqTiQm5l/5R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      42df003a9d56c1271b060686c57443beeca03aeb90f6f34185cbacadfca09037N.exe

    • Size

      88KB

    • MD5

      ad189b1ecc0e43a88777dd208ccadb50

    • SHA1

      eed594eb3de0728dbc2b4697478eb67e27c6217a

    • SHA256

      42df003a9d56c1271b060686c57443beeca03aeb90f6f34185cbacadfca09037

    • SHA512

      2e4353eb883bc23d3b0b1852234ca01d001e5a54a3b07a8be569209903767d663f77f4f81abfe8bb98fbf32aa282c5d6bcf3607c7867ce4e1959036f83380bf4

    • SSDEEP

      1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:9dseIOMEZEyFjEOFqTiQm5l/5R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks