Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    199ff583eb3914ac1755646ac83eda6b512eb851fdd202f3e96b6c1cbf2e3c59.exe

  • Size

    80KB

  • Sample

    241226-ggvm5axrdt

  • MD5

    0ed16acba1c75c3462f1bc7d80aa2374

  • SHA1

    7ba68cd906c701cff0477966dd6bba8102bdd372

  • SHA256

    199ff583eb3914ac1755646ac83eda6b512eb851fdd202f3e96b6c1cbf2e3c59

  • SHA512

    7d08882b80dac519a0f08973ea205855c1fa6d1649947437f59c341280658fe9aa7c755a08af9df18e5977c283e3e373b6c846a98321e085b248309f440edb32

  • SSDEEP

    768:cfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:cfbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      199ff583eb3914ac1755646ac83eda6b512eb851fdd202f3e96b6c1cbf2e3c59.exe

    • Size

      80KB

    • MD5

      0ed16acba1c75c3462f1bc7d80aa2374

    • SHA1

      7ba68cd906c701cff0477966dd6bba8102bdd372

    • SHA256

      199ff583eb3914ac1755646ac83eda6b512eb851fdd202f3e96b6c1cbf2e3c59

    • SHA512

      7d08882b80dac519a0f08973ea205855c1fa6d1649947437f59c341280658fe9aa7c755a08af9df18e5977c283e3e373b6c846a98321e085b248309f440edb32

    • SSDEEP

      768:cfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:cfbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks