Resubmissions

22/06/2024, 03:08

240622-dm3ddaygjl 5

14/06/2024, 22:18

240614-17w4essbln 5

14/06/2024, 22:15

240614-15979syama 5

General

  • Target

    NeverLose.cc.zip

  • Size

    15.1MB

  • MD5

    77fc7cadf0379e635258329d05ca5ff6

  • SHA1

    ef982de484c3752383a6144904454ff3b1e3aa7b

  • SHA256

    a17a5ffcc3a7fdacde98fa428bb7bc90ac57bf00e00e0eee095a4457c9aec195

  • SHA512

    c839f534ce1b54dcdfaea2e38a34f4f03ed90e00fd6186eeda7d56348407175228e340c2a784e89c8e1346c75705b4bfb8cb60ce96d92dd7934a9a0cf26cbdbb

  • SSDEEP

    393216:ZFpudKNYJCcz/7t54RJLWXZNb62+9N0PgBmw8qOKsy:ZWKNyv/7t56gd+v04BzYy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverLose.cc.zip
    .zip

    Password: 123

  • Neverlose.cc/Guide READ ME!!!!.txt
  • Neverlose.cc/NeverLose.exe
    .exe windows:6 windows x86 arch:x86

    Password: 123

    9e0bcb4548257af08f006535fb3b92e6


    Headers

    Imports

    Sections

  • Neverlose.cc/cfg/Legit.cfg
  • Neverlose.cc/cfg/Rage.cfg
  • Neverlose.cc/data/debug.txt
  • Neverlose.cc/data/project.xml
    .xml
  • Neverlose.cc/data/remote_settings.ini
  • Neverlose.cc/dll/Load.dll
  • Neverlose.cc/dll/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qdds.dll
    .dll windows:6 windows x86 arch:x86

    0edd12175abd0668f206c00bc96d8e3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    d8a3f00ff3fbc59dba9d847ac221e7e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    5e67e8efb78e2d874e73df5b5beeb926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    b418eeffb2227f3d84fb9a4085d4d42c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    0e3ad0d48dcb1ea61669a0d68f51f6a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    3d2f3c44f0af62ed5c93b2157431d832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    4a8bc838930a6747ad2f370dde6f5ced


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    c82aefc4c1a131f898f9d67fa8a9d63d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    9ba7981e73e6b29d40b5068912326eeb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    8d8a902193cfbf207d772df08cedf025


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/translations/qt_ca.qm
  • Neverlose.cc/translations/qt_cs.qm
  • Neverlose.cc/translations/qt_de.qm
  • Neverlose.cc/translations/qt_en.qm
  • Neverlose.cc/translations/qt_fi.qm
  • Neverlose.cc/translations/qt_fr.qm
  • Neverlose.cc/translations/qt_he.qm
  • Neverlose.cc/translations/qt_hu.qm
  • Neverlose.cc/translations/qt_it.qm
  • Neverlose.cc/translations/qt_ja.qm
  • Neverlose.cc/translations/qt_ko.qm
  • Neverlose.cc/translations/qt_lv.qm
  • Neverlose.cc/translations/qt_ru.qm
  • Neverlose.cc/translations/qt_sk.qm
  • Neverlose.cc/translations/qt_uk.qm