General
- Target NekoClient-Setup-1.21.7z
- Size 139.4MB
- Sample260808-rd3vfagl3s
- SHA256 5750860358791bef04690c941cad264d573e0b04ce46d2af15905706bc920e1d
- MD5 d0c3844fd66b5c63ddd4f8f2d0d85108
- SHA1 6f402fad2e2f45fe16cf02c0de7d59073a915f34
- SHA512 565d2edbe42eb10d378ae026aa84858e89ebf44d2ab7fb336ea362f29af9badee6109fff482ebb81a55780a743ad5e4b04dfe200978aaeea53f418f2ba050d8d
- SSDEEP 1572864:sURatNwM/N8Bo80blNx+Osw2oDbb6vgwR3iLdbIwOvYddZF8+iuj/UxmiMk7+V+z:sP/An0eMnWz0/u17rga+KZqr2ftEnCX
- TLSH T1C7683374338E8BFCF12FA435A3065791E5331382ED0D1BD5A28678E9C3A07CA65561BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
NekoClient-Setup-1.21.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
NekoClient.exe
Resource
win11-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target NekoClient-Setup-1.21.exe
- Size 139.4MB
- SHA256 937165222edcb35004e48650c1ccd2f37d335fe02c90f9614433d033b8891886
- MD5 a8ba6a6d36d99d7e6a6e64b71936c009
- SHA1 bd9c7da5b86de8d271462a088663bb8022d33ec5
- SHA512 de9477f52c922611f86b9e25e49e4aa242f9438d472d5b1fb7d4bd6ee06c334a7492c9485f8c6a1aa8f6fe819f8269aca013ef8007124719ff7ed0f3c55b2041
- SSDEEP 1572864:TWu/zs9o4lKUERxxBoAKW87cM3SexMHcYHhKJZfeS5LzrIDUWf/G0EjQCTi9JHfC:TWPlq3xTIszehjUrH05B7s1L0Gu5KwgO
- TLSH T103683330338E8AFDF22FE4315705579195372383ED0D1BD6A38678E993A07CA69161BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target NekoClient.exe
- Size 171.8MB
- SHA256 e8d504407eac9cc2a8503a421e622479a27a8af05e8c34f0934406562bd10744
- MD5 494dfe896af83b791be27f38422627ac
- SHA1 9da6fb353fa08d7cb66b052042d8d377c384d671
- SHA512 e8bb2b6c2b9f3300f20ad3b26cdc22b4afdc6a94f6d1b2a6518e82a5bb1adb6bffd693f465481c0237f4da0b8027a5d3622e0d2f6a3bafe94f66dd50c1cf0871
- SSDEEP 1572864:rasGSAvwGc3AWWR6cN2rxlMxg3fkRPgGFDyrakAcihuSrK6yj0Jip5hMj6xCL4N:j4fc/M+i6xCL
- TLSH T1C2888C03E29A51D9E01DE1B5978B9233EE71B8454B29B2DF275407522F7BEE42B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL