General
- Target nevoeiro_run3.zip
- Size 673.8MB
- Sample260712-3ppyhaby7s
- SHA256 0e4c61b7e519f7e8db9bedc303e17a187f8263655aee91188a7cf24c8db261d5
- MD5 e0dfa390a5725ae6e5ccb3196308bb18
- SHA1 9d42c9bf83e1370b24f66ebcbc057acf13753a8b
- SHA512 e7a3844ced124267914cfff404cbb2c66a0fa5e77d3aa9b11be626eecc838c16bddc35079dd1b7f3860568bc7fdf5979e18a0d55f0d992acf2d3b6e9e9d567ee
- SSDEEP 12582912:HuixQhU56pxmbYpUXRTPjZRyuAAyLKTE/ps/yWZtwoRQ2U0XJUwb:txQveh1ZRKAyeTE/O/yakCb
- TLSH T1FB793317798680BFD0821E3AE93BA7D5273B76711F468C676BC0250CAE75FA1243E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
banking_trojan2.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
banking_trojan2.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
nevo_hook3.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
nevo_hook3.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target banking_trojan2.dll
- Size 673.8MB
- SHA256 94b0684d0dcd7dc59a7194f0b4cb2c1df9b6c3063e394068e021ccda96d6d30e
- MD5 9bf00e124e09988eb803f4c87583d2a9
- SHA1 1d6aaba6b98b615dee7a3cfd4f98f7867866d896
- SHA512 d33f49294ba53a9f23eff38abaf750b2d746fe2292ab9fe05c52ff76884d3b64ec7124cb1ab68fdb19fa78ffda6fcbe784f1dc94e0a3f776eaa5be4781c48b77
- SSDEEP 12582912:MuixQhU56pxmbYpUXRTPjZRyuAAyLKTE/ps/yWZtwoRQ2U0XJUw:exQveh1ZRKAyeTE/O/yakC
- TLSH T129793317798680BFD0821E3AE93BA7D5273B76711F468C676BC0250CAE75FA1243E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target nevo_hook3.exe
- Size 20KB
- SHA256 2b62294728b6c2463255ed96579e4769cdd6ad6acedbfb0c45157949e4f0f76d
- MD5 33b2cadb2ab6d8fc5820f72358586522
- SHA1 fa52a3c01405f8e06c3afb9d0aa7daa9a45dd885
- SHA512 625b2ea0921094b11a8447e205d3dcfb5ef41fed78a7aa22a4d7660d091769598db911c2a1416885901c2d77642fcb5237c7ae91f3775c5cd6d888339bf5520b
- SSDEEP 384:5W26GILvkwbdI5nGIywC1+/Ua+mNNNp5zwHcPuZ:56pw+dI5GIywC1XaxNr5zwwuZ
- TLSH T11F92EA16F20385AACC33B3B1C1D7D67EE661A64885621C5FFF270E18B63A6015D36367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger