Overview

overview

6

Static

static

3

injector.exe

windows10-2004-x64

3

injector.exe

windows10-ltsc_2021-x64

6

injector.exe

windows11-21h2-x64

3

injector.exe

windows11-ltsc_2024-x64

3

neverlose-server.exe

windows10-2004-x64

1

neverlose-server.exe

windows10-ltsc_2021-x64

1

neverlose-server.exe

windows11-21h2-x64

1

neverlose-server.exe

windows11-ltsc_2024-x64

1

neverlose.dll

windows10-2004-x64

3

neverlose.dll

windows10-ltsc_2021-x64

3

neverlose.dll

windows11-21h2-x64

3

neverlose.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    New Compressed (zipped) Folder.zip
  • Size 29.6MB
  • Sample260815-16llasaa26
  • SHA256 03c3a42b5487839ff3484a564c4cb150b7aeccfdc959cb787b8f94118b648b5c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverypersistence

Malware Config

Targets

    • Target
      injector.exe
    • Size 20KB
    • SHA256 3c6705e804b7ed6b750f2232a167c4a41e5485a4576c38c7a1dbe453e83023be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoverypersistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2behavioral3behavioral4
    • Target
      neverlose-server.exe
    • Size 8.8MB
    • SHA256 1b6573fc3a75d302dfe8fb3e7ab3c4a85ea1fa9c130c8a11f2df0ae98792b9ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6behavioral7behavioral8
    • Target
      neverlose.dll
    • Size 53.1MB
    • SHA256 6c4c961852290842a8307e37c93a0df2661378d6ff0af6d0735482f34737b952
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral11behavioral12behavioral9

MITRE ATT&CK Enterprise v16

Tasks