General

  • Target

    Necomator.zip

  • Size

    935KB

  • MD5

    680c4da32a408878b8af2e80831f9421

  • SHA1

    8ca03f7aacf3cef56360beab8cc746d34a074f6e

  • SHA256

    11293ba8c7abcfe69f8ad9979aa82212bbb73102090b2844081d63540a3700a0

  • SHA512

    959eaab7919ecb652543aaee6477c0f6b1e2a3045d4c933317962f636f686d6f0943eb1aa31bf2bf5d438e5e053901cd21ac52c4436a2a574b521e733b6da2ed

  • SSDEEP

    12288:7u40Oji/PCyzx7uj9y8aA+0sTx/KihOH15ZF/oCcJwmCSb/0dHFXQa1RZXLKWtE:7KQi/P91ueAQTxyihOH//STwFXQiT7la

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Necomator.zip
    .zip
  • Necomator/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • Necomator/CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    46310f9cc3d737e79880b9e8a77b58ec


    Headers

    Imports

    Sections

  • Necomator/Necomator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Necomator/NiggaSploit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Necomator/Scripts/FE car script.txt
  • Necomator/Scripts/Inf Yield.txt
  • Necomator/Scripts/Thunder Client 4 Solara.txt
  • Necomator/WindowsFormsApp5.exe.config
  • Necomator/WindowsFormsApp5.pdb