General
- Target NixiusLoader.exe
- Size 7.0MB
- Sample240801-2c2wvstfne
- SHA256 ff041d3210d74ae83d27d0f757f9e7387031c15dbae65166fff6843eb5646905
- MD5 58d6dd7f014106317372469de062b882
- SHA1 86264e7c817495eceeacd21b1d91b27ab873035a
- SHA512 d5c38ea6d4eb3e935f9c128b6b3e322262ad3b266216261904b9f6bb464841808e3681dddb0f23cc6d0ac57ea962d0d72e5b52e279f14f7e815ee4912c29bec9
- SSDEEP 49152:Bmo/FQb0jSUQWSF898NlaVeuHFrLDoUFmagPKKu7wG0QHBTal+fa+PAXfTx:Bx2ojJNXZolhKzwGZB52f
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Targets
-
- Target NixiusLoader.exe
- Size 7.0MB
- SHA256 ff041d3210d74ae83d27d0f757f9e7387031c15dbae65166fff6843eb5646905
- MD5 58d6dd7f014106317372469de062b882
- SHA1 86264e7c817495eceeacd21b1d91b27ab873035a
- SHA512 d5c38ea6d4eb3e935f9c128b6b3e322262ad3b266216261904b9f6bb464841808e3681dddb0f23cc6d0ac57ea962d0d72e5b52e279f14f7e815ee4912c29bec9
- SSDEEP 49152:Bmo/FQb0jSUQWSF898NlaVeuHFrLDoUFmagPKKu7wG0QHBTal+fa+PAXfTx:Bx2ojJNXZolhKzwGZB52f
- MD5 SHA1 SHA512 SSDEEP
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Legitimate hosting services abused for malware hosting/C2