General
- Target NepTunnel.exe
- Size 71.6MB
- Sample260905-153s7azzcv
- SHA256 133d1749cdefa8038fa4e0c6408dc7eb25b3eee741a6c0faa93820a8e8725729
- MD5 299fdbcf27b764591cb10b3421eb69a5
- SHA1 5c4bdf4a0133b74aa94e85c9ea318b428a31d494
- SHA512 969da9386435531538c470c54b02d26869524b236b18b1dc90fa9a1b12989482fd4be2527df1862ca1f7f5449314036a41505483d7a3c946e99ff4cdb459e5c2
- SSDEEP 1572864:xPoYnH9OGDy9f6fYXr5ePianz6cacdDuajbO/b9xgSdca6:XnH5mJyYiiaecacdDoDjlcn
- TLSH T17BF72246E2A900E8D5FAC0F8C5575517E7B13879172097DB61A4BAEA3F23FE06A3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NepTunnel.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NepTunnel.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target NepTunnel.exe
- Size 71.6MB
- SHA256 133d1749cdefa8038fa4e0c6408dc7eb25b3eee741a6c0faa93820a8e8725729
- MD5 299fdbcf27b764591cb10b3421eb69a5
- SHA1 5c4bdf4a0133b74aa94e85c9ea318b428a31d494
- SHA512 969da9386435531538c470c54b02d26869524b236b18b1dc90fa9a1b12989482fd4be2527df1862ca1f7f5449314036a41505483d7a3c946e99ff4cdb459e5c2
- SSDEEP 1572864:xPoYnH9OGDy9f6fYXr5ePianz6cacdDuajbO/b9xgSdca6:XnH5mJyYiiaecacdDoDjlcn
- TLSH T17BF72246E2A900E8D5FAC0F8C5575517E7B13879172097DB61A4BAEA3F23FE06A3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL