Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...c2.exe

windows7-x64

10

JaffaCakes...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4bbea092210b652896836c7ed57301c2

  • Size

    64KB

  • Sample

    250107-eb8lpavlgn

  • MD5

    4bbea092210b652896836c7ed57301c2

  • SHA1

    7fbff2ec2bba0a602550a60e591d9062b6e0dd06

  • SHA256

    9466f8cabba1bc42a45f5eaf645e83c401e2f4d8b550fccb1dbf327faf31c9c8

  • SHA512

    8c62d2b187fbd776b416e7dc7e3e9d8c9ce2d037b68314c641178f5fd57dc21c6d63644dbe5f9eb2859c134d73ccb8a02af7c9524410decc51aaf1438f9d3b70

  • SSDEEP

    1536:od9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:YdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_4bbea092210b652896836c7ed57301c2

    • Size

      64KB

    • MD5

      4bbea092210b652896836c7ed57301c2

    • SHA1

      7fbff2ec2bba0a602550a60e591d9062b6e0dd06

    • SHA256

      9466f8cabba1bc42a45f5eaf645e83c401e2f4d8b550fccb1dbf327faf31c9c8

    • SHA512

      8c62d2b187fbd776b416e7dc7e3e9d8c9ce2d037b68314c641178f5fd57dc21c6d63644dbe5f9eb2859c134d73ccb8a02af7c9524410decc51aaf1438f9d3b70

    • SSDEEP

      1536:od9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:YdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks