Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fe4a6444fcf0504a6d3a48072244167145d4d191e0fced191ff7b263119d4c14

  • Size

    71KB

  • Sample

    250124-nnjmrsxpcl

  • MD5

    313ec61c311f87ef3513914163905a08

  • SHA1

    74fde2d922688492f12d0c91839021ae9b5b7c37

  • SHA256

    fe4a6444fcf0504a6d3a48072244167145d4d191e0fced191ff7b263119d4c14

  • SHA512

    f4303ae873e2449b6043b65252e8c764687d61852278ba19ac63c4384eb507a16374f67d6e1c675ba7ac34a2e921af063918deb37f36b8ba0121805720679219

  • SSDEEP

    1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHP:KdseIOMEZEyFjEOFqTiQmQDHIbHP

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fe4a6444fcf0504a6d3a48072244167145d4d191e0fced191ff7b263119d4c14

    • Size

      71KB

    • MD5

      313ec61c311f87ef3513914163905a08

    • SHA1

      74fde2d922688492f12d0c91839021ae9b5b7c37

    • SHA256

      fe4a6444fcf0504a6d3a48072244167145d4d191e0fced191ff7b263119d4c14

    • SHA512

      f4303ae873e2449b6043b65252e8c764687d61852278ba19ac63c4384eb507a16374f67d6e1c675ba7ac34a2e921af063918deb37f36b8ba0121805720679219

    • SSDEEP

      1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHP:KdseIOMEZEyFjEOFqTiQmQDHIbHP

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks