General
- Target Neverlose.exe
- Size 39.6MB
- Sample261017-tfstcssw8q
- SHA256 3c9f41ec2d1f65f66eaebea80acfbcad2d5adfd2df2d73bb42acf46fb0a120d2
- MD5 5b93f9b0e9eaf80ab98cc0195b551c42
- SHA1 7018f4add3aa21a864ecb0933e45a3dee2849c26
- SHA512 4e60e1c723758fa55222c65bf4178694fda314e5ce9d5ad9cefc92d198c313289b582f771c897d76411e4dc051f7cab85ff1a540ed61b5ded5ac890f7db481a4
- SSDEEP 786432:jEyGJw2XqLmxhhIBSaFRIRxxdV2nmPaCJqCMMMMMeEEEEpSS:jEyGJ3sIRxx/2mPaCJ/SS
- TLSH T19097AD2171828EADCA31AB7494B37F13F6A1F0DD92B61AB35371859E8DC87DC80507B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Neverlose.exe
Resource
win10v2004-20260911-en
2 signatures
40 seconds
Behavioral task
behavioral2
Sample
Neverlose.exe
Resource
win11ltsc2024-20260911-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target Neverlose.exe
- Size 39.6MB
- SHA256 3c9f41ec2d1f65f66eaebea80acfbcad2d5adfd2df2d73bb42acf46fb0a120d2
- MD5 5b93f9b0e9eaf80ab98cc0195b551c42
- SHA1 7018f4add3aa21a864ecb0933e45a3dee2849c26
- SHA512 4e60e1c723758fa55222c65bf4178694fda314e5ce9d5ad9cefc92d198c313289b582f771c897d76411e4dc051f7cab85ff1a540ed61b5ded5ac890f7db481a4
- SSDEEP 786432:jEyGJw2XqLmxhhIBSaFRIRxxdV2nmPaCJqCMMMMMeEEEEpSS:jEyGJ3sIRxx/2mPaCJ/SS
- TLSH T19097AD2171828EADCA31AB7494B37F13F6A1F0DD92B61AB35371859E8DC87DC80507B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger