General
- Target neotic trading dmcc.com
- Size 1.2MB
- Sample260508-kfgxesex9y
- SHA256 42e34cc17b95ac48cc7664bf5bf3b31740cb2106ebc3e3b2c468f2d874f45540
- MD5 118d413aef53a4c644ee10acfd96dbc5
- SHA1 24de0c3eec378a0e0effcd4012138456e987fca1
- SHA512 9ba5b108d0919047af68d19835813f1f86bd671bb3195cc3b83e3e37f88123e82710b533f18204e99cecc9016c0d541e0c47f2d56e5afdfd0d84783fd8fd9043
- SSDEEP 24576:lHFrghvPmyAzyNshz/N5VpMeQoyfJuz05y+3X7X:liVmfzyN+r3VpPQoycwyS
- TLSH T1C345F1089AE71642C23E07B9C0430548D3F0E65FA293D79FBBCC96E46E52FA6CE47591
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
neotic trading dmcc.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
neotic trading dmcc.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target neotic trading dmcc.com
- Size 1.2MB
- SHA256 42e34cc17b95ac48cc7664bf5bf3b31740cb2106ebc3e3b2c468f2d874f45540
- MD5 118d413aef53a4c644ee10acfd96dbc5
- SHA1 24de0c3eec378a0e0effcd4012138456e987fca1
- SHA512 9ba5b108d0919047af68d19835813f1f86bd671bb3195cc3b83e3e37f88123e82710b533f18204e99cecc9016c0d541e0c47f2d56e5afdfd0d84783fd8fd9043
- SSDEEP 24576:lHFrghvPmyAzyNshz/N5VpMeQoyfJuz05y+3X7X:liVmfzyN+r3VpPQoycwyS
- TLSH T1C345F1089AE71642C23E07B9C0430548D3F0E65FA293D79FBBCC96E46E52FA6CE47591
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1