Resubmissions

12-07-2023 17:45

230712-wbrrlsec33 10

12-07-2023 17:29

230712-v2m1nseb79 10

General

  • Target

    Neon v2.rar

  • Size

    103KB

  • MD5

    f38b27745d24cc16c2d3c6e5fe933e7e

  • SHA1

    bfc30c46362584622a863cf153ef8eabeb838c6f

  • SHA256

    b1e22731feaa39630fdc4ce2f145dee3984d5c8ec57e67d681c2bec7c0c3ebc9

  • SHA512

    a43beb185f76b8503bc8768e8477b827fb2a7faa317fc52de758c43ab82f3484415077450a29596f9c0087a5d637888c8d0514218750fc5f35c0fd777a666ccf

  • SSDEEP

    1536:/vs6Xqj51478GgTnDdwsJ1RDJiXIAD1eAvG5FpvouWfx6s5/GkK1iPzimAuRExbw:XkkgTDdwsJDBLiWQss8uziCRE1A/CM

Score
10/10

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/956477791124205569/zhz-iUwTtwf3ND8UdSeoNmdX8X4ElZBSxqhFrwstZ6oV5o-CWZxANYz737UasCARyImg

Signatures

  • 44caliber family
  • Detected executables Discord URL observed in first stage droppers 1 IoCs

    DISCORD URLS.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Neon v2.rar
    .rar
  • Neon v2/Neon v2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections