d24e48f2ed3046ee2bf89e61d19d057cb608ffe8782e7c30e31199eefbef49ef

Sharing

Copy URL Twitter E-mail

General

Target
Neko98.7z
Size 311KB
Sample260928-2faxjswtaz
SHA256 d24e48f2ed3046ee2bf89e61d19d057cb608ffe8782e7c30e31199eefbef49ef
MD5 38d30bc853fd67d3d31d9d6b7bb0be4d
SHA1 219c971a362ad826d11a700fca8f7ee1c51e4f84
SHA512 3ddf404976f7026fc9547b66b613102b1cd9db57b0803c06bb7a670fc0c74cf7f0b93f19daa783fa78e6196dfafa26fef89d8b8da17404b05138b15d53fb21c7
SSDEEP 6144:+FBSWjB1KiktUN6hNkepJn8UIoGH7pL7EbBYUbHjrenu2TZvxJNBzPahyfNq:+5jB1JktD6z37pvEbeCWnbvi
TLSH
T1646423AE22CB845ED79B191412AFA1808F5A274EC47F155ABE14F3EB10FB2155E73834
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Neko98.7z
- Size 311KB
- SHA256 d24e48f2ed3046ee2bf89e61d19d057cb608ffe8782e7c30e31199eefbef49ef
- MD5 38d30bc853fd67d3d31d9d6b7bb0be4d
- SHA1 219c971a362ad826d11a700fca8f7ee1c51e4f84
- SHA512 3ddf404976f7026fc9547b66b613102b1cd9db57b0803c06bb7a670fc0c74cf7f0b93f19daa783fa78e6196dfafa26fef89d8b8da17404b05138b15d53fb21c7
- SSDEEP 6144:+FBSWjB1KiktUN6hNkepJn8UIoGH7pL7EbBYUbHjrenu2TZvxJNBzPahyfNq:+5jB1JktD6z37pvEbeCWnbvi
- TLSH
  T1646423AE22CB845ED79B191412AFA1808F5A274EC47F155ABE14F3EB10FB2155E73834
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1
- Target
  NEKO98.HLP
- Size 15KB
- SHA256 7fff8e9e7cc6f9fe91f8d8f5c1baeab3e9c0e35623470abd2a30e0308ad60e45
- MD5 093f25b76864eae06f488d296ebf450e
- SHA1 ec5787516c9b2ce9d0b51c1cf4faec6b30ef06b0
- SHA512 25a8c04993ecfb428f111f648dd0df4b4db83073f98b15f6333f362c2c801aff5228a45c5912f31911d90e2f059738e7658ac68218069de3b159f335a9d1873d
- SSDEEP 192:11jip5N/swg5jfrwnVO984U0jbQURkMfSKDnTRaWsWRPoi:11+b/swghKc986nRkMfXDNabWt3
- TLSH
  T1EB62090B3C91C613CA144236CEABB7F97A343C54ED5083633208BB5DE87B7152A8D92C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Neko98.CNT
- Size 380B
- SHA256 0ca71bd97a8a23d9fdb2e1ac5d7d513c8c2779eaaebf91695d7c976bcc7a0d7b
- MD5 c2ef1f73b98e23f0bb9332fb35b37b0c
- SHA1 a2e21fea0cbe6751decc949efac309e50463feb8
- SHA512 ddc7c45878e17472a83aaa4c0a608dc3e8e7af5c1716179c5c0dd01d12ce12146df5a0b891ea4b486094889a1e34325b0160cd8855a94feef67af7733c92a482
- TLSH
  T167E0C03A0A3021B103B5D31FCAF2BB05AB161D631D26D0DD38970000B3F3B4691AF06A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Neko98.exe
- Size 969KB
- SHA256 3d7b49d6cdbd75f16dd17680d09e0ca7ec535b49d9ef209b84c79ec89b195ca3
- MD5 3a1aa4d3d19e9b6cc626f3b79e46bfec
- SHA1 0dd64a23f302cfbc51f21212dc139bae04d3dfa8
- SHA512 66ff6170ce227fd3f2b08ee78c331a8c7e2a6d61fdbf20ea51fd258498b56fd0e12b916f2a3eb357be7338c36e120e85006abe445c22c94ab794258f456dd810
- SSDEEP 12288:rLlGf/y1+0wx5CQMiiTuuw+Zl/m1XhIPMufPPdHeVruyOXzRso:rx1+0w7P+ZlwhIPJfHd+VIRs
- TLSH
  T1F325E501B7615018F9F716FA4ABE60ACA93DBEE11B1494CB61C43AED8639BE07C31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Neko98.txt
- Size 2KB
- SHA256 70ec808ba53f014ab36b1f945053b0e51c1374cb61084d1febd82e171f0e518c
- MD5 d78f19f9b1217d901c1b80443ce8962e
- SHA1 7c6ba14458bb107b91350d3f3289a748d51b37ad
- SHA512 c71186a4b26cb1e32ad13552f7f2ee3585d82285ac3bc1318e557a1d94419e775fdc51e4f7bbfbe45f02a86fdd05f5b9907ea9bd184f8c154e1d47da60a1f01c
- TLSH
  T1F751214F9C06627B0192D2A3515E1593F739590063AFE054FCAB826E262D827D3BF9BC
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5
- Target
  NekoCFG.exe
- Size 931KB
- SHA256 a293f682a02525e503c130d4301ed968db872d3396a97e7bac1d4004bca4188c
- MD5 a8d6dc171491db2c2cb5fdce65d6c7c2
- SHA1 cc69d595cb7c4666f681c229d71efed4632b6094
- SHA512 a45083671e1e7282c165d066d38d7c1ce15884654a5d8e0ab2424b91e3efa3b7071d9b9d9408d282941365c8865950ecde85a1aa40e32b49cabc178cc09a039b
- SSDEEP 12288:W+MnqDw9wiiKuum04P+5hI0AQA0hvf/cYoWQjduFD6M7:W+bw9xhIXEf/cYoWwS7
- TLSH
  T12C151701A7A15028FDF729FA4AFE306C993DBAE1172494CB52C42AED9725BE07C31717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  license.txt
- Size 499B
- SHA256 0a34e1026822985b7264cbdec4aa1f257f1566ac0e48cd51dc9c0520b2ab2674
- MD5 1755f90cb7575dead80a1e2aebaf3dc3
- SHA1 5a49f5b012198d1402d8ae188c52d87d4057b51c
- SHA512 0154846c16d7e579d0e75e91cb6650510ec95910f9878b605493d17cfe66b51cc5636a38a1979cabf2b87bdc3cb812557b5521b7660d9c427c6ad781b57fbd8a
- TLSH
  T137F05089E7C492F1108501D95A1A8886E3359C3471CE63D23E11909FB325F3572379FE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7
- Target
  sons/awake.wav
- Size 17KB
- SHA256 9121844d6f46154f3176b43603d45a6ea5d7cb645bd16f0e20770d26db205ca7
- MD5 75c3ba0b93f294588264002046e1f5ba
- SHA1 b9995ebd30a9801b7a60db1c4425db2496f13730
- SHA512 d5e6c9468a8cf14bbaeb231fa5c7d298753c91c8b3d8895194fe59c85ce195c9ae0b6e4a534074812c9e85cad42298086dcde112f6e50a1743334bf470b477e0
- SSDEEP 384:aBrOAlEOll2Y23mXb/xi11tvF9gCYI7Nl89CFgupvxcYQdjsKhNXaIfZ3nwFV0:UlzlOZHEIj890g0xZ8fzfZ3O0
- TLSH
  T12782BFAFB9D031C6062F47BCFF2E187822197450846C43CD49E5BF5A2CBAD68D4F6A81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  sons/idle1.wav
- Size 16KB
- SHA256 157eee651f4fc9df627c7a0d55d6a7b5c76464ac2d69f9f71c8d46743bfe5153
- MD5 0d188a15e6b5bc40523ddc16dba6b128
- SHA1 33a5701cfbcc62a3424e1921e8e7c9d2569a342e
- SHA512 ddcbcb7a7008fe8a681db51726823fb513b5658bf7244426f7f23a4a492f7983a1ec52ba09a7ba8a2969203b0b9c4c7b900fa46874b71a453032741b826dea73
- SSDEEP 192:R+oSswyfFQCTQkbt62N0XdqU3mpPcY/jWX+T2iih3rU4h1uDWVKXKB2kHDA2irRr:R+oIyfqRetGXFEPWXd3Y4gKBtHD67B
- TLSH
  T18C723A715062677BC2CED732EEBD7A9CA9565055F704E22C32C09C8E48FD766C288DD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  sons/idle2.wav
- Size 10KB
- SHA256 1a7cbfe1bedcd32a1bcc1632cba9fb301629158f1ad0e005a4f4f0d16f964638
- MD5 9ea9526c0b2ff447683a351186977150
- SHA1 849c6604800fbb0cae0a97f093d69666d084a4b7
- SHA512 ae47dea859e107c685293434855d6709c006e06d892e4cf67a52929c291b7f64e9d52543f6bfaec842f4a0d71e6e9fa2ce152cd4e1d9bc7d1af9660ac2a38ba3
- SSDEEP 192:OCn0/KHV/2VubcHkVE3QKjZ0v3kmVHwdcnF9dFi13L10rt1DUCeFArJwh0JYKj:ONkVRboYFv3kmVHJFWyPZeEJwO7
- TLSH
  T111226D329111BC425188D3E1FF6C9DA8F28C6B73CD8E2A41434BEE9B54F5578C098C5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  sons/idle3.wav
- Size 28KB
- SHA256 2e25e1e0ab946e6bf726ce465fd1aaf1c6e560974a8404f5970c17cdc11e2b1e
- MD5 ae556f3f25e1bb2e055be0530faa10a1
- SHA1 32314cecf8d597902dfcc694858c722bffda88c2
- SHA512 7c74aeaf1d9e08d286242c61d15fb3e57779df91af830014b678617f9dd569e555f4055cb7197dc5af0b95f216c2f718ff20cbd3ff541eaca853e9f95ec2f7cf
- SSDEEP 768:CzIsiOahm2KAqglkZQm6iHej31pPmaDs3zfENULAoB6:C8hm2jmZsUen0oUB6
- TLSH
  T12AD2D0ACD426649905130AA4FD5C88E9A1CBEC904C3EEFD22566ED3548339B4EC429FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  sons/sleep.wav
- Size 38KB
- SHA256 8dd00a38f5659ab373de54e4a1b9dad61e5bca6c3aed46c1cfbddfd451e4ab53
- MD5 1f65c7bebe234456446ba3b57e987113
- SHA1 3811d62e601311f73fa56b84e18a6878dfb39d0d
- SHA512 2427ec2ddf6a9a2c9662b5a6a3cdc599a1f722ae6438ed1e3a56a2f16ef2557d7ded9bc39f116aca258f56525f96c302f768f7e9c047431de57c44897d6eac7d
- SSDEEP 768:sHbQYEvZYuEjVCE0igZvrq8FvfOeiCNl/expt5R8z0ZRf7y7RnsKfIDsnqOD9+cb:sTljVci8uvFRxZBy7eKvnqOd2+BolM
- TLSH
  T1E403F1BEB4B1381A2E4E45B4FA6EDA7C75C65CD15C7CA7C01534FE4A0036A59C8E3A83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12