Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_3bf16a21a8e0a406d5976f856dcf1dec

  • Size

    64KB

  • Sample

    241231-2nnhlswjfr

  • MD5

    3bf16a21a8e0a406d5976f856dcf1dec

  • SHA1

    5db1e8473896729151dfe31e481417c4ea0e5738

  • SHA256

    9d49b6090471b8ed06adc1cd2efb147481f473df7e2c4d596ac731ded35027fd

  • SHA512

    c143ab45c56baa6149231d31ad246c5d17363c1410bd178a683d9a75833840bee95d4f9e3f91411bbe2725e40e9cef471c1f950364b74eea19edcbde6d97e1b0

  • SSDEEP

    768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:MbIvYvZEyFKF6N4yS+AQmZTl/5O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_3bf16a21a8e0a406d5976f856dcf1dec

    • Size

      64KB

    • MD5

      3bf16a21a8e0a406d5976f856dcf1dec

    • SHA1

      5db1e8473896729151dfe31e481417c4ea0e5738

    • SHA256

      9d49b6090471b8ed06adc1cd2efb147481f473df7e2c4d596ac731ded35027fd

    • SHA512

      c143ab45c56baa6149231d31ad246c5d17363c1410bd178a683d9a75833840bee95d4f9e3f91411bbe2725e40e9cef471c1f950364b74eea19edcbde6d97e1b0

    • SSDEEP

      768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:MbIvYvZEyFKF6N4yS+AQmZTl/5O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks