nepc.rar
- SHA256 4b6c96fcc41c6daeafa2db52a7f8e388d507a3bcb9b09a44332fa0a0725460b8
Password
infected
Overview
overview
10Static
static
3nepc.rar
windows11-21h2-x64
10nepc.rar
windows11-ltsc_2024-x64
1nepc/nepc/README.txt
windows11-21h2-x64
3nepc/nepc/README.txt
windows11-ltsc_2024-x64
8nepc/nepc/...dge.js
windows11-21h2-x64
3nepc/nepc/...dge.js
windows11-ltsc_2024-x64
3nepc/nepc/...ng.txt
windows11-21h2-x64
3nepc/nepc/...ng.txt
windows11-ltsc_2024-x64
1nepc/nepc/n5.js
windows11-21h2-x64
3nepc/nepc/n5.js
windows11-ltsc_2024-x64
8nepc/nepc/...v2.exe
windows11-21h2-x64
10nepc/nepc/...v2.exe
windows11-ltsc_2024-x64
10nepc/nepc/...ng.txt
windows11-21h2-x64
3nepc/nepc/...ng.txt
windows11-ltsc_2024-x64
1nepc/nepc/symbols.ts
windows11-21h2-x64
6nepc/nepc/symbols.ts
windows11-ltsc_2024-x64
8nepc/nepc/...g.json
windows11-21h2-x64
3nepc/nepc/...g.json
windows11-ltsc_2024-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nepc.rar
Resource
win11-20260911-en
windows11-21h2-x64
21 signatures
600 seconds
Behavioral task
behavioral2
Sample
nepc.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
600 seconds
Behavioral task
behavioral3
Sample
nepc/nepc/README.txt
Resource
win11-20260911-en
windows11-21h2-x64
5 signatures
600 seconds
Behavioral task
behavioral4
Sample
nepc/nepc/README.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
600 seconds
Behavioral task
behavioral5
Sample
nepc/nepc/ac_bridge.js
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
600 seconds
Behavioral task
behavioral6
Sample
nepc/nepc/ac_bridge.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
600 seconds
Behavioral task
behavioral7
Sample
nepc/nepc/fb_setting.txt
Resource
win11-20260911-en
windows11-21h2-x64
5 signatures
600 seconds
Behavioral task
behavioral8
Sample
nepc/nepc/fb_setting.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
600 seconds
Behavioral task
behavioral9
Sample
nepc/nepc/n5.js
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
600 seconds
Behavioral task
behavioral10
Sample
nepc/nepc/n5.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
600 seconds
Behavioral task
behavioral11
Sample
nepc/nepc/nepcmenuv2.exe
Resource
win11-20260911-en
windows11-21h2-x64
14 signatures
600 seconds
Behavioral task
behavioral12
Sample
nepc/nepc/nepcmenuv2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
24 signatures
600 seconds
Behavioral task
behavioral13
Sample
nepc/nepc/rp_setting.txt
Resource
win11-20260911-en
windows11-21h2-x64
5 signatures
600 seconds
Behavioral task
behavioral14
Sample
nepc/nepc/rp_setting.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
600 seconds
Behavioral task
behavioral15
Sample
nepc/nepc/symbols.ts
Resource
win11-20260911-en
windows11-21h2-x64
7 signatures
600 seconds
Behavioral task
behavioral16
Sample
nepc/nepc/symbols.ts
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
600 seconds
Behavioral task
behavioral17
Sample
nepc/nepc/tsconfig.json
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
600 seconds
Behavioral task
behavioral18
Sample
nepc/nepc/tsconfig.json
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
600 seconds
General
- Target nepc.rar
- Size 301KB
- Sample260916-m171fstv3n
- SHA256 4b6c96fcc41c6daeafa2db52a7f8e388d507a3bcb9b09a44332fa0a0725460b8
- MD5 2cc2497ce17ba05e7ec1f5b24d9139f4
- SHA1 38a5a63508747dc3aee05f310da39e772f7f89d8
- SHA512 5d639d15c91e6747a285a201dd4e67b08ab564f4227d682f7fb3e9a3ea2f1d55399b052b24975183cdc94ac0fee98747b4a0278ed7de4c1bd568ef847878eb3a
- SSDEEP 6144:+V3Ya3s4c2YaBiRazJNf4Fi0qGOdcNh6HKI5WWDAX7LXzbPvl2t:MIEI2jsazn49P4HHKIMLjgt
- TLSH T1E1642376BA4C44BDA2817BA1CCD26994450D15DE972FA9E6BD48604C2ACFFECC0C6E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/nepc/nepc/nepcmenuv2.exe
File Explorer
-
nepc.rar.rar 301KB
-
nepc/nepc/README.txt363B
-
nepc/nepc/ac_bridge.js.js 152KB
-
nepc/nepc/fb_setting.txt3B
-
nepc/nepc/n5.ts.js 1.2MB
-
nepc/nepc/nepcmenuv2.exe.exe 218KB
-
nepc/nepc/rp_setting.txt3B
-
nepc/nepc/symbols.ts19KB
-
nepc/nepc/tsconfig.json233B
nepc/nepc/README.txt
- SHA256 948c9899de73f872b01f3fc8e384496506596ea25cd6748055f6b24e77dd9d1c
- MD5 8cbccda0b9aa234c12ab1b18c0d4ef90
- SHA1 771b6d7846b56e8b9e0e72b98e35f8628d392d5d
- SHA512 2ee679246837b88e056fcac56d3ba7b6ede58a0617a17e3b076007cc5019914a40805aa45bf903543691061d1a02925f1ffe0096063646028a2401422b407aef
- TLSH T14EE0C04EC9B1E67C5E393233B71501D2C546C0DC570E000DA65CEC167A0DFB0E0E5067
- MD5 SHA1 SHA512 TLSH
nepc/nepc/ac_bridge.js
- SHA256 112d3faf06c878c472b25a0d2cdee885fee80d6c5345a9dd602c2ef70887f788
- MD5 6ccdd9db47b018f0a45fa555ff5e264f
- SHA1 ead20b3a4679da0bdbdc2eed9b0ec1925c75b7b1
- SHA512 345dbc3a0688d9ca3baa32ea51edca7868c2435272dc7f953a911b9458423d73cb467aa92d959317afaa0d3c366d793f01820ba8cb215d57ec40158f12f7d570
- SSDEEP 3072:ZCvCDtQpvzOY0mQrYrFQxAqXAaQdczvQg47SFOokQpg3FwiwgpB0lINK6jx5E3FR:ZGCRQpvzOY0mjqxtVQ2zv147SkoHgWiw
- TLSH T1A5E3744929F78262812BF42C2B4BD04CF23995036159DEA47CECC364DF9A931A6F67F4
- MD5 SHA1 SHA512 SSDEEP TLSH
nepc/nepc/fb_setting.txt
- SHA256 d7fa28c3026137549d1a22ea54d81a96a3c684ad9d3c8c1bcec2287e25ac4961
- MD5 4dba4ac2c00a8ba0f1d6eb96706c5bdd
- SHA1 c2948b69c68969f78d3f3297de53a4899f524226
- SHA512 5ff5f34282761a982660cb0f3d9f24dde6126b3e8882e78090b9330707faff60858557f8c05d8931ca8c9fcea3b6d49c78adf76e872e95555796f0e5abff5c4c
- MD5 SHA1 SHA512
nepc/nepc/n5.ts
- SHA256 05fd4f8a3a42f278941547a43cbca8d5a396f926a180916773029e0cbb4f3f80
- MD5 5b20778ce1ffa3291141eb95067e1235
- SHA1 e26df31d39a2ff235fcc36130a6489b86cfe6d62
- SHA512 92bd3b03bce56a7a5c0657ee7e238c5917b12f33736e340249638cc35409c17f3792575365b831bacad069c804bee979ea73afd853b7071fa7bbf9ef8702b573
- SSDEEP 24576:gJuBJu6vk1hE4ouIY/NhxTKve/Kg/J/kFhE4Yu44UYAzZ0Cbe8qUp7xR:gJuBJu6vk1hE4ouIY/NhxTKve/K2/kFY
- TLSH T10A55665B152911B9C577F37E8B934048FA33A7237A12C6A57DAC82212FB702452F3F69
- MD5 SHA1 SHA512 SSDEEP TLSH
nepc/nepc/nepcmenuv2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bee76974ad1cab50a8a8f166d6e3e9c9d641ae6ff811b339641976a5bb6f9d27
- MD5 8a950935ac6a5de88102078e85c6c431
- SHA1 fbe44d24f6de41482785173e4a91bec531d889ad
- SHA512 204c489fcecea9e11f0f0fe189c00753dc04b13ac2d364644f137e0535d2aa5b8f98efc592f9a44bc137ef7c62a663ede9760dd54c8a70889e8e743acecf2dec
- SSDEEP 3072:fL+kuHtJ/BF1G25yC1pefEHBAnpK37nXNV8u0BEQ7Ehy74tyJhTtKvsciyW4c4vj:CkS/BzG25yCqq8T6hocDDsazSJg
- TLSH T1F9243A5227E8C92BDB7E17BAE4B106206774E54B9122E74FB4CC19F95B5338049233AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
229010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
216KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
nepc/nepc/rp_setting.txt
- SHA256 d7fa28c3026137549d1a22ea54d81a96a3c684ad9d3c8c1bcec2287e25ac4961
- MD5 4dba4ac2c00a8ba0f1d6eb96706c5bdd
- SHA1 c2948b69c68969f78d3f3297de53a4899f524226
- SHA512 5ff5f34282761a982660cb0f3d9f24dde6126b3e8882e78090b9330707faff60858557f8c05d8931ca8c9fcea3b6d49c78adf76e872e95555796f0e5abff5c4c
- MD5 SHA1 SHA512
nepc/nepc/symbols.ts
- SHA256 2fa67a8f4800c9b9f3afff9d11beb2cbb5cf50b7d2a521c2e56318591bac2776
- MD5 1838fc01f65b0614602f72036a6ec8db
- SHA1 9fc98ba9f5dd6b303d38210f2c8e2c80a7a135d6
- SHA512 d356f321940df5eb23101dff0d716d0d99ab14f016353727220959349e5554ef38105b4f10544f006d2f9a975aa3cb31374618a4d66b62a06d32cae591269109
- SSDEEP 384:dn0nTzJ88zYja9Lmmc91rAsFR0PDCaf082h43B+lL29M:F0XnzT9oQ082h43B+Yy
- TLSH T1409244923364AFEBE56D0485D9F886EF24F00DA14318FFB0E56DD5FE80A0858E5D2AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
nepc/nepc/tsconfig.json
- SHA256 95ff4431b600b63e0fd6ebfb43826ed79adfb72e631db827b889102fd998c438
- MD5 94a4d7c67df3cebd3c6c54206ec8da62
- SHA1 1b4e3bde1f17ac1fb38b7908319f4311635a23f6
- SHA512 c9e304bed7c06c734eae03adc704f71e8b9bc50316dd6614ca1044370962e3850a390df1c3f333ee8561624d3f72551cf54853cb8c0e81b4914715f3321987c4
- TLSH T1A1D05E21C4240EA201D909589C4C9203596091830A443C15B68A120D5B1C63F5AB66E8
- MD5 SHA1 SHA512 TLSH