Overview
overview
8Static
static
3np2fmgen_260606.7z
windows10-2004-x64
1np2fmgen_260606.7z
windows11-ltsc_2024-x64
8np2fmgen/ENHANCED.txt
windows10-2004-x64
1np2fmgen/ENHANCED.txt
windows11-ltsc_2024-x64
1np2fmgen/Function.txt
windows10-2004-x64
1np2fmgen/Function.txt
windows11-ltsc_2024-x64
1np2fmgen/INI.txt
windows10-2004-x64
1np2fmgen/INI.txt
windows11-ltsc_2024-x64
1np2fmgen/faq.txt
windows10-2004-x64
1np2fmgen/faq.txt
windows11-ltsc_2024-x64
1np2fmgen/np2.exe
windows10-2004-x64
3np2fmgen/np2.exe
windows11-ltsc_2024-x64
8np2fmgen/np21.exe
windows10-2004-x64
3np2fmgen/np21.exe
windows11-ltsc_2024-x64
3np2fmgen/np21nt.exe
windows10-2004-x64
3np2fmgen/np21nt.exe
windows11-ltsc_2024-x64
3np2fmgen/np2nt.exe
windows10-2004-x64
3np2fmgen/np2nt.exe
windows11-ltsc_2024-x64
3np2fmgen/np2sx.exe
windows10-2004-x64
3np2fmgen/np2sx.exe
windows11-ltsc_2024-x64
8np2fmgen/np2sxnt.exe
windows10-2004-x64
3np2fmgen/np2sxnt.exe
windows11-ltsc_2024-x64
8np2fmgen/readme.txt
windows10-2004-x64
1np2fmgen/readme.txt
windows11-ltsc_2024-x64
8General
- Target np2fmgen_260606.7z
- Size 769KB
- Sample260629-15f97agv2z
- SHA256 f6f0c955551e239b7d91e0be73188a077234fbd1a863baa6f35b6a6a09a975ca
- MD5 47c80036ec8e74919b822a87240cd9e8
- SHA1 1172db21316aade7b3f2fed0e0a934953692d1c9
- SHA512 d60892f83aeb518fd358d82491407d2888bbe751b998f6be6d2bb0d7c683bc663ca223cf4b8a1455259ebf6419a85d1f9705374f4225b51f38c7864cb61b70b8
- SSDEEP 24576:YD+Bqwl8F5TvYodeWdeaQaqYoixkOxWtE:YDNw4KopTXvovtE
- TLSH T1DDF433698BF58EAFF41C6AFF8F3BDDD6B98266429D811C399204653E3D11583680E0CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
np2fmgen_260606.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
np2fmgen_260606.7z
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
np2fmgen/ENHANCED.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
np2fmgen/ENHANCED.txt
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
np2fmgen/Function.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
np2fmgen/Function.txt
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
np2fmgen/INI.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
np2fmgen/INI.txt
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
np2fmgen/faq.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
np2fmgen/faq.txt
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
np2fmgen/np2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
np2fmgen/np2.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
np2fmgen/np21.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
np2fmgen/np21.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
np2fmgen/np21nt.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
np2fmgen/np21nt.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
np2fmgen/np2nt.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
np2fmgen/np2nt.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
np2fmgen/np2sx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
np2fmgen/np2sx.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
np2fmgen/np2sxnt.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
np2fmgen/np2sxnt.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
np2fmgen/readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
np2fmgen/readme.txt
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target np2fmgen_260606.7z
- Size 769KB
- SHA256 f6f0c955551e239b7d91e0be73188a077234fbd1a863baa6f35b6a6a09a975ca
- MD5 47c80036ec8e74919b822a87240cd9e8
- SHA1 1172db21316aade7b3f2fed0e0a934953692d1c9
- SHA512 d60892f83aeb518fd358d82491407d2888bbe751b998f6be6d2bb0d7c683bc663ca223cf4b8a1455259ebf6419a85d1f9705374f4225b51f38c7864cb61b70b8
- SSDEEP 24576:YD+Bqwl8F5TvYodeWdeaQaqYoixkOxWtE:YDNw4KopTXvovtE
- TLSH T1DDF433698BF58EAFF41C6AFF8F3BDDD6B98266429D811C399204653E3D11583680E0CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target np2fmgen/ENHANCED.TXT
- Size 1KB
- SHA256 f4eb126031e6de0c4ca2a66bd16884698426ad2a043391d5aadd82b81c2ab8df
- MD5 d144f31a3b5ca9c198c1ccea83e6af89
- SHA1 65f349afc0e3320ca1083c8c84ed30e1000cf83d
- SHA512 880158c3f8a7fd319357b3d1ed091b34b18e48c4fc6fb3ba18ef042b8a190b3778f26d385e84106534e7ecf8c9edeaef4a811fbbdff6961aa55c3eed13730565
- TLSH T134217CE4786B97778037F0273C7EA68223598268D9A2760D7B7E61B01708001A3B5CFC
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target np2fmgen/Function.txt
- Size 13KB
- SHA256 cd7d9442357444afb8dccbafcd54a3a36a49f5764b1f1135640dfe322a02d278
- MD5 e96f7fccf0f391781d44403ae442b2eb
- SHA1 30c4d04a005778851f794ce82ed61135269dd2f1
- SHA512 2dbd565645db40d66e50c55224f78100d37cb26b77469cfdd197bd122d70743c8999c153989670ff44fbfb341e6f0d993da943cb223ffaa2c79120d93b14109a
- SSDEEP 192:8dcaaCxa0mLquYShzEktfvwt1CJWWJemjDz:iOhDDlEAnwn4Ffz
- TLSH T17F52DA1C1DC562C54638B11114AE8F148110DD33206698DE322CEECD4FBAA9DEAFB7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target np2fmgen/INI.txt
- Size 2KB
- SHA256 ea97dd1a24b3bf59667f16e90e5c4f62b526fba9b95c085847320c00a91f47e8
- MD5 a37b87707008bc582f74c98af76bd942
- SHA1 27162f45a6101673b46df6244f53720c9155902b
- SHA512 f01b2f08d9f33bfef9ed62b4213dfb3301bf46102f454ea444c7ad197d5ca6ecda8a0e77836a8c97e5151a89413ba3536fa70036c08a64b6fde0cc1986df93eb
- TLSH T14441E6763CFFD2454C12CAB092B36FFA217075D9C0BC7A4D43F2A46C9C4D9961160A0A
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target np2fmgen/faq.txt
- Size 19KB
- SHA256 f4bbe3466eecb84e33ff78b3fd0b625fa4a90fc958ef063b8546b0ec00b9740d
- MD5 e2a6afef902f741e04e46357cf8b3dc1
- SHA1 b818c24ded31970b892940f78572bcb49f3bec54
- SHA512 8769a3b63b56bc361f7f64ea7f4fa9a31bc72348a4dc1544747d1ffb31e35c50fead7ab7d11398f5b4cbd6c752e48cb29899c87f26b1f56d39f5d204b5ede6e2
- SSDEEP 384:jstgeEvQbuXXXJJ8xSZfY8CY4KiAY5Mr3bbE91mLQU9iGr:jssHZ8SZfY8rsACMdL/
- TLSH T1F292F9B4ECDBC5559C19D60C76F6ABC2D1BA63A2209CD7493307DF90AC4FE95139A80C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target np2fmgen/np2.exe
- Size 856KB
- SHA256 f0f8fddbf06b95c674ad66233932ebc5b0d6700861611a0b92ec212a4de871cd
- MD5 88a3b0763b35f9898ef2db09e3e0ad29
- SHA1 5dd6d8a4a231ecfc3c9069dc35d87eb42e09acb8
- SHA512 cefc5a70f0e48d14450f9c6ffda14c5a02e66dba46ee3fa09dec4f7d2c45dc956ab5634a89be74dd795d7eca4d12a8b5d35d80267bf642b033b34aa84348197a
- SSDEEP 24576:PFxS5sJcmi2DsmxCzZO07z04+UGIIMaX:/S5sJcN2DNCzZOWZ9w
- TLSH T10015C050B243B1B2C425267544FAEB7A5B702AA20337A6CFE3E8FF9F5D311815836349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target np2fmgen/np21.exe
- Size 976KB
- SHA256 e36881b27c39f166c0b736012bc37d2711d2dd9794531116758a86988d446978
- MD5 437b6e362b107b51c3d8e640cd68917c
- SHA1 6d1c5b2ae6369f7dcbb85af75213dd200cd3a18b
- SHA512 0768b9526b29c357ce42580c809c14b6f0b4beea5b0e5367199a3775cdc999a35e3749e8b9f4a8b7a3da0c0af8ef652a5bc6c2dbc5a5622b9bb5707e700dbe2e
- SSDEEP 24576:oWuEqN4VXcRlOHVI0HH8HggCTDCMTJ/hc:yEwOHVTHy1+Ttm
- TLSH T10D25AF007247D173F46129B089FAFB7959342B98067746CB63FCFE7F1A352C1A922A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target np2fmgen/np21nt.exe
- Size 992KB
- SHA256 05c276133d8fdd693ef91524ae52a6c650487af06d185293a5bdeefdc6ddc892
- MD5 8b2dfd53d4cb803bf5e24d5909b0207e
- SHA1 c6221acdaf613c28126da51cf2688cbc14cbb4bf
- SHA512 4dbc4c13476836ca500b38a05d4bf68e35d7c0f1f65cd664f87bbecb76150c5a908d20b734c66730c4eaf1af69b62fe62b0a1ec179803d9f6be1e0d762f27326
- SSDEEP 24576:LU7Cku0kz+fun1BlM0USYpL27G4S+Tho:GCk41bMDdASYa
- TLSH T17225BF00714390B1F415197094F6FB319E7C2BAA037586BBA3DCEE5F5E353829EA274A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target np2fmgen/np2nt.exe
- Size 884KB
- SHA256 fc2d0b53525fe60fb6f8c3f7cc68e73e4dee6df325a38b26655735236b880d08
- MD5 37e14048f633ff9da662c330f8117ca5
- SHA1 75542c9a0a87f56e9cbfa7a3a4d28838e27387ed
- SHA512 67b8e7889d1e0ab49a5ea4cfa5c6702369da6048365bdf260da142deaba0471717e15066ba3ee469a48d0a827abc67d1090487d18325750a19d7f883ce2789a3
- SSDEEP 12288:YiwI9jPiXH25UxuP9VMXAC7lkgOw8ScJMcPwqMeSrm7sUxnolemAQKHhq1RePAgJ:YiNjyzACo7XxnojAQKHh5PA90eibce
- TLSH T11C15B05177C19173D8312D354CFEE7765A383AE9033685CF7398EEEE9E22181692834A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target np2fmgen/np2sx.exe
- Size 968KB
- SHA256 67bb94a200c25d87c79be9b6d540057ea766d76cb54efa17c59c3e98e38e71aa
- MD5 7ce360ee6067f3ae44177311fe5677ec
- SHA1 504ca24cf0289309f67258ed32d30b3d1167dd72
- SHA512 74bd5c1584becb64b124df0a709ff081aaefae4d021f91d6c1d8870b04dee2b6074bbc22294a06878d6dbcbadf354f3f74346300a79de1e77d3d21ff860b6647
- SSDEEP 24576:k5M/+UWxXIPf5CCBc5VQYQa7upT1SLtVlunlC:x/6XIPf5CCB0HJVQl
- TLSH T1B125AF017642C172F02629B5C8F6FB324A741FA90137B6C7B3DCEE5B6A31241A925F9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target np2fmgen/np2sxnt.exe
- Size 984KB
- SHA256 7a42cc6ada3cdc600931781d1ec4b5ff57f1af20555a969d7ccb3543f5b73f52
- MD5 df92485d483a791f411fb8fb1a1c0a0c
- SHA1 b184aab523d33db15d3828f8a1f7f492254022bb
- SHA512 e9994692c8d726d95745de3b004cfcf750f689e8e4f361df2faa2e13287fdc2069a34a4ac5d7d8514aacc1013cd2aa056fb6d03d1418e21d8bf0aede70728a63
- SSDEEP 24576:9BVAvI5GE+0vbADlYdIK1a1Cr63QncgEv:GvI5XvbYYdIK1awBli
- TLSH T11F25AE137342C077E4596971D8FBF7376FB4296A0635428B93E8EE6F1A321809A23747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target np2fmgen/readme.txt
- Size 54KB
- SHA256 d89e3c141d50b7e956064a224e0b95ded3f0b6abf7e50f821b3b8d916d1dec56
- MD5 c908c467e53a06605f6b946182f24369
- SHA1 9bc6544475a9f8df37f3c69bf313965d68a8c028
- SHA512 2095abe1d89b430a4838e1507f2f41923d9d3340595d47314ec2b8bc53b9e393899db5bc2f1a15b7d5e9b940e32e7aa03e8d7d1fddd39e9c7be0101c8aa86b7f
- SSDEEP 768:PtdVr56ElVEZFEuPyAxMJh+Q+BFMubL7LHVx3t2E4vLNX3di2e6:lpE/yAt/n1OBNX3Q2l
- TLSH T1F643E770FDCBD1764049D3A5AAF6FF52E1B99356019E670C32073B90780AAD923DE80E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.