4�x�@ɗGz�c���۸�}��)T ,~���g���>%�7�xK�~,�.�����M3���w�s�Xk�hq�Ȥ��c6O��/G��*kd�x�@ /y��F�� Z���j�_�wɽ�KIޣ��Ժb.�>*���La~�ҍ�p��v��B�ӗ�"�?3 @zw�"�6�P��6��I 8wl&�ٮC��(+���ӎ��� !@�w�֏\�<5����/��GlEn'��:�Ýj�W�A �8"�4����y�,�7 z}X%��������14��6g\#ە��NA�K',P���%lq�X�^SrC��R^ؤ���d�}3�Lټ\juv%>�r�T����s��ݽN>�$Q�]'/�K@(���vG1�EL;<��m��[2vo�Ҟ܍y�'�@�<���������٬���`����.�O3�S�X��(� Cf_�0`�����X�hG&V��������@N���2��,χ"8����DG�T-������сT��>��T��[�+��[��`#,W��w�����+jPG�ʜ�8'@j�^'[�FGF ��������x�!�����jIJЊ*��hNM�q�A)l�����zj�B\1&K��ȇ�)���0�i���w4��w�D3 ��¶�b���.�����N[��lq�2��u�1��G�#�2�;q��|�z��#�a+dG�M�_���E�E�z�N �F�I�W�ٔ���ZLb\�p�9��~�y5|e�O�$�ٛK�#/Ņ� ����tO�_��o��Gm��&��[�ƫ�R�dɮ��,�tw�GBΞK1��.,v�ϻ[fƺJj�v;=�� �S2$9�10���Ķ���r��jqsx������ @T��/H�.��?�]:���x� ������K�D �;����@��{G�z�a��6I#���~W~�� z������Td<'��<�RR��s�i|;�6����њ�7��:|˾��{�L��Z1H#�y����7W��,�����.�^�Q�w��e�3�\!5g�-�a�&l:���ȥi_���"0q��Akt�d������3�=ڼa��b7X .^�͆����Fפi�,;��:�YMq霵�Ґ`B�K�����4�|��n�W�ܾ��@����5�ͽ��^�±��~��}�������Is��3e�x�z����B��f���P�"����V�9�&za���Q�X� ]ͿcZ�M�鲽`l�B��b2&O�E\d/��|���g�a����=����#�ԛY!�����C��ss"��L*q-������u_*w��/��f��~F�߶/'q,+Jj�5JR)��ȏ���LZ��W ��!�mv����1v�*%�.�������|t\]˞](J_�Gcx3���|xΐC�+c��>�+��=���?�t�А.��#A6P0�t#e#j�z����jΫ�.�a]�v��Ӵg�u3Z���\K�%Z+���Qx.�!�%�sjP�9�n4��m��ֳ3�ihF�M�����F���J��]��@d&a�� � �Qׇ�9��J�$����e���}�[a�y��lO��/Wml#ֱA�Ȥ�!D[���P� itxm^ڲ,m}��z�`@���$�9�� e�6��0��k�y?u��= 2�e�GckW]X�f� x =�)��P�A�D�����@�o�:e2(m���&�-��h�51�렄���K�$�o4�a(��Mt�<���K�S��#�%���^lu��'e+2^��v���}����މ.]sa�q]�'��хOQrXR�A=t�$Vps���w�6l'Fo�x?�"�)�������ą��\Д����[�ѝ��<�F3�[S�;=�xЉX{�5�� E��^��f��2R��V����l��hAq->�����p�f��L!��Sn褵 �8��VE`�7S�F�r��I�g��9�H~�D�;����n� ���S��vE�y*Ϗ�S?Ԗl\��([��<�������ʖ@w/���:��u�����;D#鏝�����~���*i�}M> wAS[�\L{eO%�G���Uk)��yW�/%a�������-D!�����9C[�C\Xtf��Ú�!k���C����a�(hI�|��Bv��/�(OKĚ�f��ǖ�W�5��L��ɛ��NWk�J�������s����S��ںX��r��Ʀ<��זy��8ɫ���7�NE��@s��*�[ǫ>���s;��q�ԮA&w~G??��>8eR����O�v9W|��=B��9�w\\N�4 ���ή��gK¼_���u㙩C�Z�ƌ}��e+�Rh&7]�o�)����A��P����S1j3���sW>݀�m���@"�qǃaR�`~��p�S3�_#e�"��)���K�����Y�t ��*ќ�~��A�=�w��~�Iڍ����x�h6r1�]��|[����#����j]1[�#�94�.`�RɄO1�~�_uQ��B�e��#T � |��z�[��03רԞ���zȡ*��w�d������v��4��B� 9$+�8�� f��o�J{#��-� �[���E�� #4��@|$�o��P��g.����5r��?�+%A��u����j^��8������'*W���X�%��pbs��B<E�b�D�!���!����?NWr�V���p����RD�6 ��ˢ�ʣ�s,�@����]�Zc-(F�7ʔTbFTE$_tv�4��g��œ'�S���6qI�M��n��{n+*[t�c^[}d,r�"eX��|f��I2r��)Ri#vF�;"�W���n*:&Y��)l8�������6s �N��賂���4/Z5�4�k,�Ց���f�*�n����!�����T�uW�J�f��Y��=� 9Q��� �D�w���4���˕�YUm�~���S��q]�p�O�/k؆���%^+��1��!�������l�]����&0���Xڽf��9� ��JÏIJ�D�B`�i;^��3����������P@L�1<�s��ʓE ��5��Jܑ�r��\6ehRǃT���T����ul�����;���u'�7/؋y(a[I��c� V 5��yu���43:���Bm褴Ǜ\L.���wɨQ�[@~E�J]��>��1�F$�|!��Rj��Z�M��W�ɩ�,�N���,]F�����kw��^瑢��P�ޜ�An̉��f�[�l+���D����pV�v�[�vh�Wȥ��9ߔ��PP- i�AQ�����뾸˱�P� �X��~�0f��0�9 ��`�%�]D&�=X ~�ۓ~�õ�o��=>4K���e���u~��[�[�\�)�=K��Y�|SRn� +7dД��'������ _�M��W��A6<$�+�;���\�R��3�\5����IP�WD-%�#PpX�e^�F K�����N-��5%�ۃ��u�|cx����
Static task
static1
Behavioral task
behavioral1
Sample
Nexnet Client.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Nexnet Client.exe
Resource
win10v2004-20221111-en
General
-
Target
Nexnet Client (1).zip
-
Size
4.2MB
-
MD5
b8fd6a754837ed950816d279cc507906
-
SHA1
0094e6915579813f68272065dff714b7ccb26449
-
SHA256
7fd33a49acf73f69cd4bf5a88b46f871b349fa2ddfd54292a7a65920fe647800
-
SHA512
4e1cee1207543fa605fa65a916752089a932f30542a89bac65641cc6d73965df138c6eb28bf15d12e95d2a81a8a0860d9c2dc4eb57fe4fc38a7a5b069efa5c0d
-
SSDEEP
98304:D+D6yj/MnBKVagmcVc4SC2sEU1jfla2eT/JuewsH1kdr6i/Fayq:D+2yjMnB8aFcVc412vU1zlatTRcsVkdE
Malware Config
Signatures
Files
-
Nexnet Client (1).zip.zip
Password: BeatMyMeat1337
-
Nexnet Client.exe.exe windows x64
Password: BeatMyMeat1337
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 173KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE