Overview
overview
3Static
static
3nexus.rar
windows7-x64
3nexus.rar
windows10-2004-x64
3nexus/Colo...le.dll
windows7-x64
1nexus/Colo...le.dll
windows10-2004-x64
1nexus/Leaf.xNet.dll
windows7-x64
1nexus/Leaf.xNet.dll
windows10-2004-x64
1nexus/Newt...on.dll
windows7-x64
1nexus/Newt...on.dll
windows10-2004-x64
1nexus/NexusFN.exe
windows7-x64
1nexus/NexusFN.exe
windows10-2004-x64
3nexus/Resu...fa.txt
windows7-x64
1nexus/Resu...fa.txt
windows10-2004-x64
1nexus/Resu...fa.txt
windows7-x64
1nexus/Resu...fa.txt
windows10-2004-x64
1nexus/Resu...ns.txt
windows7-x64
1nexus/Resu...ns.txt
windows10-2004-x64
1nexus/Resu...ns.txt
windows7-x64
1nexus/Resu...ns.txt
windows10-2004-x64
1nexus/Resu...es.txt
windows7-x64
1nexus/Resu...es.txt
windows10-2004-x64
1nexus/Resu...es.txt
windows7-x64
1nexus/Resu...es.txt
windows10-2004-x64
1nexus/Resu...fa.txt
windows7-x64
1nexus/Resu...fa.txt
windows10-2004-x64
1nexus/Resu...fa.txt
windows7-x64
1nexus/Resu...fa.txt
windows10-2004-x64
1nexus/Resu...ns.txt
windows7-x64
1nexus/Resu...ns.txt
windows10-2004-x64
1nexus/Resu...ns.txt
windows7-x64
1nexus/Resu...ns.txt
windows10-2004-x64
1nexus/Resu...es.txt
windows7-x64
1nexus/Resu...es.txt
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 18:46
Static task
static1
Behavioral task
behavioral1
Sample
nexus.rar
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
nexus.rar
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
nexus/Colorful.Console.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
nexus/Colorful.Console.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
nexus/Leaf.xNet.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
nexus/Leaf.xNet.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
nexus/Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
nexus/Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
nexus/NexusFN.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
nexus/NexusFN.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
nexus/Results/08-06-2024-01-28/2fa.txt
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
nexus/Results/08-06-2024-01-28/2fa.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
nexus/Results/08-06-2024-01-28/Epic 2fa.txt
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
nexus/Results/08-06-2024-01-28/Epic 2fa.txt
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
nexus/Results/08-06-2024-01-28/Locker/0 Skins.txt
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
nexus/Results/08-06-2024-01-28/Locker/0 Skins.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
nexus/Results/08-06-2024-01-28/Locker/1+ Skins.txt
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
nexus/Results/08-06-2024-01-28/Locker/1+ Skins.txt
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
nexus/Results/08-06-2024-01-28/Stats/1+ Matches.txt
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
nexus/Results/08-06-2024-01-28/Stats/1+ Matches.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
nexus/Results/08-06-2024-01-28/Stats/500+ Matches.txt
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
nexus/Results/08-06-2024-01-28/Stats/500+ Matches.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
nexus/Results/08-06-2024-01-40/2fa.txt
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
nexus/Results/08-06-2024-01-40/2fa.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
nexus/Results/08-06-2024-01-40/Epic 2fa.txt
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
nexus/Results/08-06-2024-01-40/Epic 2fa.txt
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
nexus/Results/08-06-2024-01-40/Locker/10+ Skins.txt
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
nexus/Results/08-06-2024-01-40/Locker/10+ Skins.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
nexus/Results/08-06-2024-01-40/Locker/50+ Skins.txt
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
nexus/Results/08-06-2024-01-40/Locker/50+ Skins.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
nexus/Results/08-06-2024-01-40/Stats/0 Matches.txt
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
nexus/Results/08-06-2024-01-40/Stats/0 Matches.txt
Resource
win10v2004-20240508-en
General
-
Target
nexus/NexusFN.exe
-
Size
66KB
-
MD5
4199a4297b6be3f90405ecc6b73bbe1f
-
SHA1
d2a8dc730cee5ec06fffae73943ea97de8a6cd3f
-
SHA256
7bbb6c721d882a5b7931dc975cdcaab3261fba03cd24fac5316a3bc3ba7dedad
-
SHA512
5057830286ccacb20815e4bf27cab1abdde135d85e9cee0119736789805df496823c88c2df401cedd8b4b06f51276fe3a7a85cc558198bd82a9c583a0ec6510b
-
SSDEEP
1536:scrIAFGMxYkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkVcHw7UhgIDSf:lIGGKYkkkkkkkkkkkkkkkkkkkkkkkkkO
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2100 NexusFN.exe