General
- Target nlg_ns.msi
- Size 14.0MB
- Sample240129-tmcqqadff7
- SHA256 8e12fc5aa85d6953ee731203e945ccacc4ded6a8aa9752c7331dcc17da501eae
- MD5 f1c700707adffb52929de6dff72b2840
- SHA1 190f21ef796aee07a2b4f906e7b2f7d915b18497
- SHA512 6b4c3e69822e83c977b35cd3f0b69fc38282b13dc9b07f97eb011737822624179560f5f5c1488ef487628a42eeea9c313837036d771e25a0e0358e104c5b65a2
- SSDEEP 196608:shhhkmqs4WU7FaOO13cdK1J/9V91xg9idpE1Qhv4RF5HVwZJfYabpY78vAdt2yT:sfiY6pg1MKL9O1QhAr1VwZJf9jvAdP
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
nlg_ns.msi
Resource
win7-20231129-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
nlg_ns.msi
Resource
win10v2004-20231215-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target nlg_ns.msi
- Size 14.0MB
- SHA256 8e12fc5aa85d6953ee731203e945ccacc4ded6a8aa9752c7331dcc17da501eae
- MD5 f1c700707adffb52929de6dff72b2840
- SHA1 190f21ef796aee07a2b4f906e7b2f7d915b18497
- SHA512 6b4c3e69822e83c977b35cd3f0b69fc38282b13dc9b07f97eb011737822624179560f5f5c1488ef487628a42eeea9c313837036d771e25a0e0358e104c5b65a2
- SSDEEP 196608:shhhkmqs4WU7FaOO13cdK1J/9V91xg9idpE1Qhv4RF5HVwZJfYabpY78vAdt2yT:sfiY6pg1MKL9O1QhAr1VwZJf9jvAdP
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.