General
- Target nexus.exe
- Size 14.6MB
- Sample260423-abvbvad15y
- SHA256 6f97aa84bac7949af5af5f6a5411dad58d78b6aa9fa464c96226a71960533ef8
- MD5 150c80214b7f65ad7bf18694e7d2e194
- SHA1 5985588a2c819498667de04840645e82ea9302b2
- SHA512 2a118ac0e49cba9fd5635242bb8be237c387dc6a2db46424ca3663ba6cb03d564c8f2091f6fe61ba982e5c69cd7e4eef86600cfab99a2f7e00949ba208387289
- SSDEEP 98304:eN8nzHFB8zHcbbqEWFZnbogDbVZqVEUFIbPCBnsOh8YkNJ05qisbG/n5GFEn+H5r:eYW66sEUcensEvvoFK
- TLSH T1C0F64A03F69651D8C069C074835AE333BA71BC8D473476FB5BD44F233EA6B905A68B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nexus.exe
Resource
win10v2004-20260130-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target nexus.exe
- Size 14.6MB
- SHA256 6f97aa84bac7949af5af5f6a5411dad58d78b6aa9fa464c96226a71960533ef8
- MD5 150c80214b7f65ad7bf18694e7d2e194
- SHA1 5985588a2c819498667de04840645e82ea9302b2
- SHA512 2a118ac0e49cba9fd5635242bb8be237c387dc6a2db46424ca3663ba6cb03d564c8f2091f6fe61ba982e5c69cd7e4eef86600cfab99a2f7e00949ba208387289
- SSDEEP 98304:eN8nzHFB8zHcbbqEWFZnbogDbVZqVEUFIbPCBnsOh8YkNJ05qisbG/n5GFEn+H5r:eYW66sEUcensEvvoFK
- TLSH T1C0F64A03F69651D8C069C074835AE333BA71BC8D473476FB5BD44F233EA6B905A68B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Deletes itself
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.