2c233e131540d7f1740edbefa5fe30b9d7c81309601dda102889ef8ee9ad6d89

Sharing

Copy URL Twitter E-mail

General

Target
Neverlose Loader.zip
Size 11.8MB
Sample260721-q48ypsae44
SHA256 2c233e131540d7f1740edbefa5fe30b9d7c81309601dda102889ef8ee9ad6d89
MD5 c8a197f873d813c35f384c12befd1d0c
SHA1 f9f42c4ef6668d2be21090d0e38a74359a50720d
SHA512 c88f97ebb792e7c3d4c0ff0993e8d03187a6155dba23ec2bdd5227746727b74270a748e5aa6afd2ba7f1cdcc03dc2d77bc949288ea5b66704eb61f0bfa7d0cec
SSDEEP 196608:rL11NqScOl0iigQh9ioLy0mZQ8+ewKW5NQg3VqS3ASiQcHir6NDG46jJQtyJZTnd:tzqfOKiOmZQwwd5h0LQT8a4CQ8JZTLc+
TLSH
T19EC633ADE3A6185EDC35F03A243608D66B7F82C59174700F99A82058C4E8FDE47D67BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/PresentationFramework.resources.dll
- Size 192KB
- SHA256 da9c2e82ac16c10750076df5593b3dc292e5bf5e785badd8dec57e0d42350f43
- MD5 c0b0d44f8100ba8b74fa64bac03b60c6
- SHA1 ca335fd89abed0f25003e9edb73c16a4ef22632d
- SHA512 d74cdf4c20884b4eeaf8f0754ac90f3445437426190fcc58cd825c1b5018ad37683a0fcca4e1af77817b0b671cee2e6b19a0db70f072b46837bcfeb921ef6c87
- SSDEEP 3072:dGvHPmNMzn4KIr62w7irW9gmOlkOVujaCv+2d5sHwagHpfhXtSwv0L8rlX:dGtROlkOVujaCv+IXffh8m
- TLSH
  T12014A215B7F91208F1F70FB8BE79A424A87FBE791A20D5AD0859568E0572F448E70B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/PresentationUI.resources.dll
- Size 44KB
- SHA256 a8eaea287eb94ba9acdd71c29670a717abcdebe49f69d8e4479bd7b1b49fb395
- MD5 733a1598afcee13a07a050a6d6ade177
- SHA1 50d99b85bf5566be1066085462ff3274a2a2b4af
- SHA512 f44a9d70311d7667edba93e455a8e57e33b0c64407fde9808eeb402cd5e93a26406666caa516901d7d0753db6fe84858bfbec0360a4b42a512a4099aa10be4a9
- SSDEEP 768:V9+UU5rEkDGt95ZHI7Q+COorA23FgdAbyJsZTd7miF4NORagVLA9O1gDj4kYy9zl:xU5rEkfk+COorA23FuAbyJsZTd7mEaQQ
- TLSH
  T144233D69A3FC1009F6F74BB03BB99565A97BFE972E12C42E0865664D0473F00DA60B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/ReachFramework.resources.dll
- Size 38KB
- SHA256 4a47d39f967b4172c7e3f74ace026b86f0d3baed918a34b4376fff77eef94173
- MD5 5581e66add1999fe2b1e32dc446079b4
- SHA1 2eec9aca6c9e7466fdc875542c9814696123bae7
- SHA512 752a6a86dfc34857f60245f98a552344cf7e3bcee5d390b3624a789b0bfcf99ada67287a93a9c45a0f970dadbac28311b55719b4a1249bb726c95cd5971ed008
- SSDEEP 768:e2SzmZ9ewDSc2PpTzggPY2hn3sK3jjRsODMhlOLYIfUVrRGKUPGm4hFf7YrhwwWz:IzmZ9ewDScDyc8wwWPzv3
- TLSH
  T1D803C646EBFC1549F5F30F74EA78C1156CBABEA6AB10D56E1059A14E0432F448EB0B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Windows.Controls.Ribbon.resources.dll
- Size 18KB
- SHA256 91be3e89bd64b12799354ab2839fbbc29c0d80b14357da4b8920145be338b602
- MD5 3bd59ef46b90032029d4a8af7d301c65
- SHA1 e5aabf49db592020f31ca1faea692d496064fce8
- SHA512 d00f8070074631e4f01d8e5d4b0d8ee7f121c4f43e44aa87fcc7f4d438ab683096141204248c1eaa436f9f6ce47d4ed2f131560c7bd8d423fe039af2c15cf1f3
- SSDEEP 384:ybLh5hznekoWWU/hljHRN7Dw0P3U0R9zr2YQ:2Fbnz8UDjEB49zFQ
- TLSH
  T12F8208524BFC1207F9B71F706A78EA926D3E7FD12A04D56E1195EA480C63784DB30B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Windows.Forms.Design.resources.dll
- Size 145KB
- SHA256 cbbabec206994a1ac72d55ecfc1bab6f832f8da101889e31b5c9345b9eafb56a
- MD5 09578d8822ba56706f7fe0ea3fc02ddf
- SHA1 e9d168b0780e614f46d7846b7cefaac70621763a
- SHA512 d547bc934b4e8ad2b6b50686200c9824d28d0d23631b42a66cb949b1b6c79ba6dbca44de2d4d1cc9c9648a45e1098476f0ee4b9999630c7554517ff1071c8aea
- SSDEEP 3072:EGR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yn8ZCeLo98bB2Y3eRhwvMhAUlEL3F:ENEL3eAVR6+v3QC6kT
- TLSH
  T18BE35F6127FE2309F5F35B746FBA81908A7FBE76A900C53D1426151D8932B829B60F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Windows.Forms.Primitives.resources.dll
- Size 15KB
- SHA256 789945b78901fbb8f51207bf55a46974118ff6788a811d47025b056384dbec27
- MD5 192241a5ecb838c957572949c34baa45
- SHA1 17b17c3dd7eb4de067480c6c26d57a22ed498e16
- SHA512 08ba62bb3ebab1be577eafc817a84c9a60a10fc7f9eeffd72086b80f6fa149d41fada622c1f0a42ed5ba374b1631eb996eec447d901c82b3bd32d295f0fb4cce
- SSDEEP 192:sS6tQccVIPW9iWZI41WgVuAwmbxHnhWgN7a0WaaUHWX01k9z3Ap+dZjM:x6l1W9iWZI4PDHRN77ajR9za0hM
- TLSH
  T10872188587A84203FAB75E7066B9C9437D3D67E75D10AA2E0681F6081DA33C5EB3472A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Windows.Forms.resources.dll
- Size 357KB
- SHA256 6fff66739c79103da242be92f3fb35097299a8ba68491129b97fc760f4b4b216
- MD5 f83b5626d09c1b53c39f1c01f6a7732c
- SHA1 372e4917bd3e34916efc65c9f410c3f144e2740d
- SHA512 c7cb8542ad61c8a7a0796b5d5a93805b55fa38e8c96905bcac232f4a778bb7758ec1de54ac853eae1e5b8db9c77b4667a8baf7fc46f90805c67142bf51262613
- SSDEEP 6144:sqcG8hubU1YaA7qJILgdTskBfw9IgcPixGAc5gPRXlHY5ItiVTSqVZ:sqcGagqA+gPRXlHY2cZ
- TLSH
  T193748104A7FA7208F1F70F993BBA54608E7ABE616E15D9BD0854858E09B2F48CD70737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Windows.Input.Manipulations.resources.dll
- Size 16KB
- SHA256 9a3fcade0db35cffffeb833ac9f64abd57f382e697c21b91b639b167ac895d28
- MD5 539176ee538bf790fe82cc71a8a9cfee
- SHA1 2002ac8468058a1245de57dd06b9354bb5ddc5e1
- SHA512 bc5970d25f4d673c05286594c46c53a8659f1ed1377c16855ed4c1eed288433af9653057aa723f15bfa25477b3d14d8761d2dc6e1e90d5c4ee0a1a244b933b7c
- SSDEEP 384:KnemGyNUWigM/hljHRN7qP3U0R9zr2RDV:EpKnDjv49zAJ
- TLSH
  T1FE72089687AC4247F9B71E70A6B9D9433C3EBFC61D44D61E1681FA482C63381DB30A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/System.Xaml.resources.dll
- Size 63KB
- SHA256 3964afd49a6ff4ba9fb06116c288ef00641fc7f9d79fd01c48aaac6f8a89d789
- MD5 afdd18127023ed624a79be30b66c5289
- SHA1 1761a0eb4b0d0fd6fb58d1ca2fce49186d08d83f
- SHA512 43be808c9a1ad4362beb87a48d0e728a5e9c0ea097c0a6409a67538223170fdaed68f46ff26f3b0a459d7b8a4c5461cbf4f9b727b8e7d5a0cb65256d15681311
- SSDEEP 768:SaZOv6KEoT/pba9wcfRm+enfF/gD/F4oGiYspNqHMK/xExeCh4o6N2+tVx0Vqi0t:Gv6KjfFC/4i3p6xV8w9/4zEQyLzr
- TLSH
  T16553D824B7F96209FAF74FB47A75D9645C7E3E691E10D8AD148A568E0072B40CEB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UIAutomationClient.resources.dll
- Size 19KB
- SHA256 febe4f822f0bc784875e6d2cdc171be44deaf57acf81f4262f0ac55d2afc0240
- MD5 6af726b4d72a3f0d2bf2e6fd0be802f0
- SHA1 09ee7a5e40a77e5440e1b0219414123f15200f1d
- SHA512 74641578f1dcc517330d0716dfb576b0b099ce11a76728adc9c248d5830dfced8e411ab418e899d97b4e96834aea55a01a8893ddb050f9976eae83e42c3fb185
- SSDEEP 384:qE2fl/3YTo9rbJTTHWWwJI7FJWSB9/hljHRN71w5tq/R9zV0qbXk:qEsl/3c0TbWWf59Dj1atU9zVlbXk
- TLSH
  T17C922992A7F80646E9B70F74A6B4E9522D3EBFD62950C06E0941E60D1C73B44DF30A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UIAutomationClientSideProviders.resources.dll
- Size 20KB
- SHA256 2a87d59a6221322e51ac86ad9b1bbd69a9ce5cfe396c5723f3aacb9cc9db3dd0
- MD5 93352e9fc55bac1579a95eae32ad2f27
- SHA1 1f64b2adc7e8dd96d593a8109ee3fc928805f216
- SHA512 e3f929b01354a9f47a974ec1d20716f28c7b13ec4ba34eecb0bd050d08065b63ecc71bcaf805543dd9129e088edb949215a80318aed74eaa15bd7d6c7f7e0be7
- SSDEEP 384:aNAMEXIoYk1fkvFAwxkoWxp/hljHRN7tPtGkeR9z7tVpVNa7N:OAMExYk1fkNABXpDjtgkC9z7tHVNaJ
- TLSH
  T1F5A2D75287FC310AF6F31E706AB5E9625CBABB9A1910D56F0241E84E1C32784DF2073B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UIAutomationProvider.resources.dll
- Size 15KB
- SHA256 45315108f9fd2c989fa270e4192ebbcc9c51b776cea0d73e840a9246cecebb27
- MD5 ca58777407c1bec7a96d977f6a9dcbb8
- SHA1 c906dfbce07a50d39e1fdd20c84b91a856a48a49
- SHA512 9f81e7409de30d6e86661401b782d11710a7c97409c9822588b86728734fb7a3068666c3ed8af3f613febe8ef288c60778bd68169224113220759a586cd9e6f8
- SSDEEP 192:qYE3Z3roWPFPpWkhq1WgVuAwmbxHnhWgN7aIWa6zUHWX01k9z3Av0KTxVg5:6lcWhpWkhqPDHRN7/6zjR9z+VQ
- TLSH
  T1C76239C68BAC8643FDA75E7057B9CA437D3967C25950A52B0586F6081C633C4AF3022E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UIAutomationTypes.resources.dll
- Size 18KB
- SHA256 ec7e47d2997339f05f36356f1225796585ed6a9250a662e8de57ad69d9aebfa3
- MD5 e1aeca6b2f19bcfe77e6c5976499e04d
- SHA1 cd68dd8d0a37ec1118784b5ca62c9182a431573c
- SHA512 476cecdb25ce8c00df3cc834ae912dff584a550201bf990b4c3fc595ef8bb8d91a4cccc851a98ecf1d58df7336ca4072270ebd62c83d3930af459e22e659db22
- SSDEEP 384:esBHqQrFhTpW3S/hljHRN7v1wGOrjR9zACLf88:eEHLKSDjNwGOrF9zhg8
- TLSH
  T1E4820852DBFC2106F5F75E743A7AED925DBEBBA66900801E0151E54A0C73F849B2073B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UninstallTools.resources.dll
- Size 20KB
- SHA256 91aea63e7a567751166c14206424ad7d7b837fbd79836ad3d964ec674f39f72f
- MD5 65a4ea35416dc1e4874786bfa9673ee2
- SHA1 d8630e5fac9d77fe38b83c7871516838eae72f8a
- SHA512 f89756073d605ba242cd47bd948c75df1169a3653ab0720a6acafaa515d7d976024d08c321810b500b7a5f85f5a2ab3bfd9511d2624ee85b5b109b55f18e64f3
- SSDEEP 384:hfQ+xENkpvyoeSjpsZrquSGdr2Vz2CsIGuwZvq4selTF8:tHxENkX1riGGuwcqTF8
- TLSH
  T1979220127BF80228F6F34F397E7A4994997BBDE21E11E95D0586145E0832B84DEB1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UninstallerAutomatizer.resources.dll
- Size 7KB
- SHA256 0360162bec64ba3cfe019fa51a8e3b2ee1c1dea88c27682c306c7b9a476df74d
- MD5 0137620a2e587477f384bda5923cf8af
- SHA1 3f54662cd02e6413ec07191a86d791fd61bd30ed
- SHA512 af932a3e3373c58c7e91b48330ff5961270c6e7a93ddefeff0af9a32126bbe6f74814f95c79da78272151d2b308a272637a36bd1c304c291fcf67e7d21721022
- SSDEEP 96:mZJuq5i2ABoTifRZ3q4EdJ3THw53f6jkY1MvaaRleZdiDs9qgn47O5:mZ3i2AJv3q4bxNY1MDY2DsOS
- TLSH
  T1BDE1210267F90128FEF38F39AD3A92985936BDDAAE21C51E0485041D5872684CEB2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/UniversalUninstaller.resources.dll
- Size 5KB
- SHA256 1bded91a9caffece96c208f2344d3549dc6ef0c57e3d73172da7b6ebac1981b2
- MD5 912484798d8b70742ad6ea9a3cdcd708
- SHA1 fd5158f7bd085a8afafee150c60e8756246c7d63
- SHA512 815d387df567e200fea651ffcb99d9b8ce744f51f688e4c1a2e08791417bc9971d01ccdde55464fba6c8ccd90bdd97de8391a10605b7f4a05a41fe77d37b4b46
- SSDEEP 96:1YBUdUhWNWjIdxZmRHfAXwQTWlSpWYLdpIbW2I:1c4zWHfAgQyRzY
- TLSH
  T1E6C13F1267F40179FEF30B3A7C775380663AFD529D21DB2E0985121D2832A59CEA2F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/WindowsBase.resources.dll
- Size 84KB
- SHA256 6138f6fcba7a6cb641930b32c9e92c56dbf2b323b08ff00406e9c32272a8c9c0
- MD5 9be2d43821505042a82719123955a344
- SHA1 5d87047bd9878ca67f2767e80e2c3b8d5133a44a
- SHA512 4851742030f699496d28166ad2ffd682eb1159e48d37da2758c029448bd58f290fab1aa3f6a5ac87c17cc2949c70c8aa80f20960f0b087afebc8d56ea2e3e3fe
- SSDEEP 1536:bV+D7XRp8VMkHsY6kmnmmUIaRQoZk6OeEPPdVYFWa7Ez/S:bw7XRp8VMkpmUOLdPstojS
- TLSH
  T14A83B411B7F96109F6F30F78ABB9D919987FBE6A1A21D46E1448468E0432F90CE70737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Neverlose Loader/Neverlose/win-64/Resources/cs/WindowsFormsIntegration.resources.dll
- Size 15KB
- SHA256 a9210e55bfc8834b23b614f0fba70bdeeca7a93e01cd6b9f17a4e836427c3fc9
- MD5 f4e8d78c8205047cfb81d0253ff3fd07
- SHA1 ae24ec786c4f0217edf0860f0b21372e132a17a6
- SHA512 636cb71b4df5eb18224185a748bb03ca92be050c5e93bb9f4e65f60c00dc1531476ae67f1f178ee820265473c07d31b82c5fe5f5d6e6a4e8787c327f3f3ba0ae
- SSDEEP 384:AKRLFLH/aW2DkJWp5JPDHRN77Pm1v2ifX7R9zUuoy:xZH/f2JXSR/F9zUA
- TLSH
  T176724B9197A88143FCB75E3056B5D653BE3CBBD64920912F1599FA4C0CA3389DB30A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/BCUninstaller.resources.dll
- Size 89KB
- SHA256 706baec364d2518b32d933a829310decf7b40bc5a94d1ed6e369b40574b9e539
- MD5 a93252bd115fe54ab7c9cb9e6d414433
- SHA1 0c021e05853116302b5412a26b83943dab5933b6
- SHA512 dae5e16f0dedc64bc963ac73ef8312dfafd5244c81e20aa7138923ba22baff1b6099afe3e71963ae1c9045c508278e277fe277236b729e90353f9cf0ab9dcd18
- SSDEEP 1536:zwqKpgfKY5kLkoY0Z6XNYDfnYwvfpAaLPlPz81iD/+y:BK6HUY0YEnYwvxNLDd
- TLSH
  T1AA933F012FFA1268F7F3BF796A758965693BFAA29C10E22E0045054E0273BD1C5A5F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/KlocTools.resources.dll
- Size 13KB
- SHA256 33f964701983ba64c05a78ef9496f5ccc36b389e11543949e523caad8a05198f
- MD5 c936cbd1a9d6bd4a990249fd7cea2d17
- SHA1 d87aeb26b2c0ccc94359de05f03b78d15851a8e9
- SHA512 44f68b54ff9e6ab358e9dd36188f76fa3f09e2fb7ceead16fcbac6bbae4e370296a94ceab33a6f96daa2eadb03fa12ae4b55b58338c1884df99abef84f51c90f
- SSDEEP 192:2K0A9b5IUsl+ov8gSYbz8D14rbo07+95QYN9NM9PLiyA8N:2K0A9b5kl+nYbgD1Go07+9yYNaZ
- TLSH
  T139524D129BF811ADF2F39F363CB65491263BFE929D20D21E0554112E1AB2B55CAE0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/Microsoft.VisualBasic.Forms.resources.dll
- Size 25KB
- SHA256 7446f98410d9e3132f33f7208e1881a5c68e473f1190446a8d3da94b38a1a9be
- MD5 64baf5ed9c2a2698dcbe143eca25b125
- SHA1 aa0bdb980ead7cffa725485ae1b6b67957987fb6
- SHA512 4f23dcf1099b755a92718935c45bf789858fb4c6a25a6e726b2dac1eb789e24cbefc765e4c6e7601c253dbd09f704200b3135b5470986185fc13771d579399d5
- SSDEEP 384:QGXSXRaRmIPXdXxa9G/Quw22zdXhY//QxpsJpraWYHAhQ5WA/hljHRN7xBjZtq/g:QTIOGIR3o/oe5QDjxB9tU9zVo1p
- TLSH
  T1E6C2D761A7FD1209F9B35F301AB6E0923D7EBBA66E00C51E1195924C0E63782CB30B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 364902c4f05ad552bcf237b638c81706bf6c58b53311dfe422d7a1512d849214
- MD5 498f71fdb6ed9a487228a8778077e25b
- SHA1 ffa161860f2fe0d261212e1bfebce7fe66281396
- SHA512 ae0846e2d47fb339172e4c30350c9d2a9160cfa9edce30ed42a976ac1c7872f7defae69a7ff189fb4cb16f121873be85cce6ace480fb4bfe20a06a24d50c6718
- SSDEEP 192:noWq2iWWNv/jzSENtqcadVl8PandjJUf7ZJSqSi/ufASa1b5rAM0XWr:nyd1Nvb5adVl8P2djJMZJSGuoS85rAMJ
- TLSH
  T1B2122E499BF8063DF1F72FB9E9B68631B43AFD968D32D62D0244814D5530A41CAE1B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/NBug.resources.dll
- Size 5KB
- SHA256 3392e954432843c920cafd83782657e7a06972035c1894168a10f377f0345fdd
- MD5 d1e7dd2abb326553b095b14955f4fced
- SHA1 cad6a1efa1adbf29c97d19743c4069b7a294f6f1
- SHA512 c3674c3c60ad36054d6d8e2620551d07474d7c2f16bd8c2ad1821aa9928a9cbe6528033bb1ceab183348fc3a978ac381fb68a29898cd212bda38bc5a65ccc9e3
- SSDEEP 48:6I6XHMoM4Oq2idbnvYtkBzl+z/IqDmIkLtCWCWCYd2xtMx2k8jYrKL0td1vElbl7:0I4tAF3lIj2baajT8dKlbltpHQGuKrK
- TLSH
  T1DDB13352E3F91268F7F34B72BD71A3811077F9E29E15866D0840126E0D526628D75B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/PresentationCore.resources.dll
- Size 111KB
- SHA256 8aab839f6cd29f81c3c174c270f0b149621264e6067299f61d9dd01e8dade1d6
- MD5 1a58bdf64fe7fb7f7df14cd537985c2f
- SHA1 70616ea14fe33c5fed8cfa443482ca1cb8cbaa9e
- SHA512 2cd6dddb2d085bab024254a1ab135e217b1e6168bd92a8a0278f63debc7678c02dc83dd6cae3b25ca213e5593ea2bb3eb1ae12abc3cd08c903360c3e55d84ded
- SSDEEP 3072:31iIo6VUKnxiKRShGqpHG9MTyzYbiEnaFEgljLW:31iJ6VhxiDhGqpHG9MOzYbiEaF/0
- TLSH
  T161B38102BBF9515CF2F76B347F7598267D7AFEA61A50C01D1085909F0972AA0C9B8B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/PresentationFramework.resources.dll
- Size 208KB
- SHA256 b5c0fcdadd0f849eb5fdfb7de884c1b69551d934b3dfe49a921e8c1d97950530
- MD5 5c00afca08600cff0a83e261461b90e0
- SHA1 22444b18da51130503941fb4d0975aab4d06fb1c
- SHA512 842edcaa5f724afdeef56adf2713823f877733a1f8281ad4e4be1a33a8d7faa2b3464c4af172686aa4899c2dd339af6c04cea2fb8cb0db9f963c54e47a3ed9d0
- SSDEEP 3072:aGTpPMKCjcKNI3DPzjPZTBS6fZquXuWq780znJGNEfsTzB++0W/pm7eLgAjucXCQ:aGFhquXuWq780dGysZ++0W/pgegg
- TLSH
  T15B246002BBFA611CF2F76B747F75A816BD7AFDB61A40D11C0184405E0A72E6189B9B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/PresentationUI.resources.dll
- Size 46KB
- SHA256 146061fd2de79dcd4254843db3561c09bf2d5a4219dd443f67e8953e2c1eed8d
- MD5 837222c079818364d705ad5f5e3234eb
- SHA1 efea3005617d1195fc450dd020c09f0c5bd55b93
- SHA512 b792b65da6f110e69edd92e935a1dde574a0f05dce1aa1701b78f41432275e031ea1c665b0d74dfcfacc945509c15810bdae5cf6db2e245b615d39e351c648a9
- SSDEEP 768:Tp4ICj0Yq+OlNxbf49Re1sqwa3DsFDOgvOeX0e+W7goew5BmPm3hOnWhW9pnGUVH:14ICj0YGvsqwa3DsFDOEOeX0e+W7goeX
- TLSH
  T10D233C52A7FC200CF6F75B706B7699A6B93BFE676A02D10E0468A11E4473F40CA64737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/ReachFramework.resources.dll
- Size 38KB
- SHA256 e6c1dcf0f38d68a4927c42d8a097c480753700344bfeaf58caac270c892e763e
- MD5 1292092509455b23c2f06840f45fc1e4
- SHA1 76fa088f680ea8c93fb7e0d3b3807ab91f122367
- SHA512 a05fc7ce760b95981b3023e7f9b593292d1e641c733e17cbd63f2dc0d0fb32aefda60383e0de34c63bf89aabf838a0dd364b09d96904d9cd1cb31065551d8953
- SSDEEP 768:gO/ENueEDeiW9c/Fb5P+2Hi45s7j5fF9zw1EOb4mjpbjlhewSRACReC2VQDjWkCT:7/ENueEDeiKnACReCqCHez79
- TLSH
  T1F503A642EBFD2659F5F70B74AA79D4523CB6BEA26A00D21E1148905E0433F918EB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/System.Windows.Controls.Ribbon.resources.dll
- Size 18KB
- SHA256 8b67ad6e8c1b479d3ac1456a0a21e9ba1493266b8e9e25a73256538909d20451
- MD5 0580777991bde07c2e1e0ff2a2d9c4c9
- SHA1 a975ad0679124a954ce69e3961af1a629e2a7375
- SHA512 dd7379de8afd5dd79d5a8e262c919dd122db51ff9834e514d04400ce574e915b48bb1b45beaf0c80f9594ee3a192ac7e4b611084a26aa9de1ece5ad2a31e15d9
- SSDEEP 384:bpgChihsp1SkoWW5/hljHRN7kGwGOrjR9zAVUnz:brqsd85DjkGwGOrF9zam
- TLSH
  T1208206528BFC1206F9B71F707B79DA92AD3DBBD2AA00D11F1155F9490CA33849A21B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/System.Windows.Forms.Design.resources.dll
- Size 146KB
- SHA256 f4bc95b6cfda32810d2098f688ce79711e114f37c6a38ee66fbefc6c53d4dfda
- MD5 10f37f1f70656be447de20bfa101ae75
- SHA1 e9bc4873371b35ec2fe0bbd756ba7d891264af3a
- SHA512 949597b8dca9840386e0274ec02dbed1ba6a74a30bf3f8227481071ff6c09f361ef8735b13184bda28b2d47b28fb20333900b62da141a19fd95d95b1a257e1bb
- SSDEEP 3072:tR9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyf6pu39kP4TCTEWFy5VuJ27/A0NwMe9:XNwMeyXv4GvcItcV
- TLSH
  T1F0E371612BFE2308F6F36F706FB984915E7BBE77A900C52E1025551D4932A829B60F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/System.Windows.Forms.Primitives.resources.dll
- Size 15KB
- SHA256 510f0dad3de755dfd2ce43f9d1bc72778d7f749497f3b4041213dbf507500416
- MD5 7dc832fff966a84547c1fc28a581f7e9
- SHA1 c10077d10a6a3d57c45f2bb39acfad9e799f0caf
- SHA512 e6bb76fa7900f154957dc6afa882e3a57f4910cf5acdff5fdd19a7a5742d4f53bc47c3801be0cc483c4da71a10fb6f911cccdfd5fba68581e125566faaeb9132
- SSDEEP 192:7s4i6JAzsLwPW9iW5ZWQhFJtvUmmnoHnhWgN7agWYIOoYySv6dlX01k9z3AYfCLB:4h62sLcW9iW5/hljHRN7Y1jS+R9z5fQf
- TLSH
  T124723A9297BC1206FDB75E7096B5D9833D3DABD75910962F0690E6491CA3380DB30A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/System.Windows.Forms.resources.dll
- Size 365KB
- SHA256 40219cf6409bd6d6b6f03c98666ba4947717ce05496d8f4606f1ec8dd9b4f926
- MD5 05d38b81f565d46a034b591684f32a97
- SHA1 50877a4cf6bc5e851bf59eec6c516d8bdb12f8ec
- SHA512 3adf08206ff163203b6ed61221318c12504ef75e08d2483822b74e22a5cd2c410a157bdd5b14d66ec1602be0b4522a46cbba13c2cc0d9848fd3a91f04d6f39e5
- SSDEEP 6144:hqcg8mwTHMV8FqnLA0bMw3VJ8Iw11CKyOCRBTJ9Qzfv9+k/Pc1NY6G:hqcgvwQ4fv9f1
- TLSH
  T107845F01ABF9220CF2F76F613B399C66787AFE765A05E55D0454805F0972EA4C8B8B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Neverlose Loader/Neverlose/win-64/Resources/de/System.Windows.Input.Manipulations.resources.dll
- Size 16KB
- SHA256 d5f48d39cc71a3d6b6673308f2c690a01209699ae26ee436bc19114a85f464ce
- MD5 c1fa6e3bc90d63068656e5fd79d8b756
- SHA1 62d9fd62f50b0e54d5fad3a642639b21c856924b
- SHA512 64c212ade77b7a51f1b27e4af3007e767da5b4116e6a85712af46ef042e6dd035f5d2e2405b25819196a9924957caf3c921193b280d6d5e63e4e93e562afeb61
- SSDEEP 384:noe/9pWtHtUWiW/hljHRN7fA9bFs0R9zING:tWtHqWDjfQZs49zv
- TLSH
  T19872289697EC0646EDB35A7057B8D9433D3EBBC61880D25E1681F5491CA3780EB34A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32