General

  • Target

    Nexus_v4.5.4.zip

  • Size

    14.3MB

  • Sample

    241119-q7h7fswpbx

  • MD5

    29aebc1d65db45c5923d0731835f45d6

  • SHA1

    57c89bf28a7e1c306673a3f2cede536301e5edc4

  • SHA256

    b0526edf3193587ad8572d7cfccbb337bbe39bba8146d0a09b7fe9543a229498

  • SHA512

    1bc3762017458d025889f2647cbeac0752a049d5b646f2a609825ebdbd9ee46f7b1fbeb1a9845a964bc300b9537cfb36607c688ff073e80cf38c77a49d3079d9

  • SSDEEP

    393216:cZ1TTcPUiRRZ8wZzfKGZNfCBBMKOEQUXVyl:cP3mZ9RfTTfCB3OyFyl

Malware Config

Targets

    • Target

      Nexus_v4.5.4.zip

    • Size

      14.3MB

    • MD5

      29aebc1d65db45c5923d0731835f45d6

    • SHA1

      57c89bf28a7e1c306673a3f2cede536301e5edc4

    • SHA256

      b0526edf3193587ad8572d7cfccbb337bbe39bba8146d0a09b7fe9543a229498

    • SHA512

      1bc3762017458d025889f2647cbeac0752a049d5b646f2a609825ebdbd9ee46f7b1fbeb1a9845a964bc300b9537cfb36607c688ff073e80cf38c77a49d3079d9

    • SSDEEP

      393216:cZ1TTcPUiRRZ8wZzfKGZNfCBBMKOEQUXVyl:cP3mZ9RfTTfCB3OyFyl

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      reFX - Nexus v4.5.4/reFX Nexus v4.5.4 CE.exe

    • Size

      14.8MB

    • MD5

      916bb1e135a5303ec950d1d863cda8a1

    • SHA1

      6a018e6ca8e64037959dbab39aad8cdf2fb0f964

    • SHA256

      4f405b6012422e227aba366494a8bf12bc6460b4246b2176ea0e850f188220c8

    • SHA512

      385e37b7b53decaf16c09ab0bbf11b05c58c72bf8f583e2c16a82dfd3af3020eb92892287e7204aae318d6e7a3d986f72681063791c313b30d943d68f87b550b

    • SSDEEP

      393216:jbZLzYDaKbkXxW6nxX6NSr0n4DXKfu+YKr5sa:j1nWZ4xXiSo4D0uSdsa

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks