Resubmissions

22/05/2026, 22:32

260522-2fxfjsfw3m7

22/05/2026, 22:23

260522-2a17jshz7s7

Analysis

  • user interaction
    yes
  • max time kernel
    304s
  • max time network
    278s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/05/2026, 22:32

General

  • Target
    NexusUnlock.exe
  • Size 35.9MB
  • Sample260522-2fxfjsfw3m
  • SHA256 8f509d515e60af9b619afd955b65119fba791b47dfe3718997e9d7c6a7ac6a07
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NexusUnlock.exe
    "C:\Users\Admin\AppData\Local\Temp\NexusUnlock.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3380
    • C:\Users\Admin\AppData\Local\Temp\NexusUnlock.exe
      "C:\Users\Admin\AppData\Local\Temp\NexusUnlock.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:420

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\VCRUNTIME140.dll
        • Size 95KB
        • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\VCRUNTIME140_1.dll
        • Size 36KB
        • SHA256 34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_bz2.pyd
        • Size 81KB
        • SHA256 62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_ctypes.pyd
        • Size 120KB
        • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_decimal.pyd
        • Size 248KB
        • SHA256 9aac010a424c757c434c460c3c0a6515d7720966ab64bad667539282a17b4133
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_hashlib.pyd
        • Size 63KB
        • SHA256 caa4d2f8795e9a55e128409cc016e2cc5c694cb026d7058fc561e4dd131ed1c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_lzma.pyd
        • Size 154KB
        • SHA256 60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\_socket.pyd
        • Size 77KB
        • SHA256 e6deb751039cd5424a139708475ce83f9c042d43e650765a716cb4a924b07e4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 fadfa8c725705d368f0d4604ee2177d5cb7a0581bb2d1335753adfc64fc99d44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 8465299955bcecd8249a15301b638239845bd76de1df818ebb2d4b6535b24eee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 d925e52e54bb1845a15b0c6dcad6d67a3038b2876d144a78cc51d15cb93e41a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 60191e04fe0d649eeee881098467248a5e168b59d9613ba9b4fabbf507146775
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 5777fca3215f9939d255b3cfdf1ab449f4aee10703f1f1165c31da1b120cf828
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 210bdc58d9aeeaebd34190bd34a775cf91fb0281275e5ab87ee993f909f95be9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 d122384087c6727c29645e7cf257d94e5e0704717c23c7700160509bd16d2de3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 d628788d8d21db9fe409909c225cfc8304efc917fb1142e1997e77e52b2a3632
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 dc23765a7b87c5d4815e2dffdd402f5e49d4bbc9c71213fa37fe61bad0166733
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c92afae47ca1a069544518b33f411e084434ce4307aa70543070c9f7f3d60c17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 644d9bb0fdebfd86110bc34c310e0bd6057fe632046d5f878dd4fc76082155b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 3686f9ad8d1c19fb8a8feecd57211ce4ad59c1249c2a0bb1a8399b001e1c59ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 630455eec7bd945057986de6741bd6f4f9369d7c3d734100af657d2549de4a04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 eca40eee9572597663806e1abf2082a4f509401863a935afe9ee0b06de1a09a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 73ead53a7d400a0a2a446a33124c707be862bad7916803eca3c202199fe6fa4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 cbd454c1fc8047537a90d94d52daf7c967c9910e38bc81672439e2a2e5b77e52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 9821e85b6f21ce0022b19fff30291f447f81a73161c787d0d050d835694fa273
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 cd628b00cd473e6258acf696fea9dbf469f6213ea0c3556f5dfb639f577186e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 d5bc30b9893d39e5dd91d05be652cb0a9fd51ee39165dc141eb642b369ae0433
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 7b3aa3a6318745306af2e05268d81009d18c11cfadbd5fc87af6b95e31cf91c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 bda958b926dd792f513709b01aaf4e26c6267fd4633d9679b02b3f4a106ffa7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 120a724a57d1f422f18341f354477f622027812fbbb18831bfc34055e9ac5a75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 7183932d27ff01461c05cf0c388d5354814c80a332f10b5414865367bbaa6511
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 6531d132d0240b027c9b71df0f863cf157483def895d7e5bcc58e301673a02ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 dd34a8cc78f981cb6a6c79fe50948b251bd1f0a868c598fb7b7efcf29ad06046
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 6c095f61c1eaa4f4cb60d27bbda341fcc99b3e720aa3a37c31be5be2b0254112
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 e4352d24215bdfd908b7ea3b6a821fce693183bce8141229f3154cd6f2d29cba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 cf64f6ee17edd8935a378da8d3d1f288dd4acd35f19a7927725bc5b216f27ccf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 60832c0d740cc5fecd38209458bf206f3ecd834cbc32861ab3490b1d49ff6c54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 ee19753a0f92fd0689799b56a403c72b688b569320e48a2ec2aec39711c0c7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 412c38a8177fb699d6f34939cf1d66831276e51fe250ece77616fca5eba9ac3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 981c68db275cde3b30cf19cdf50aff1eb0af359f385530cffa201cb469ae2e15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 5c2fe236393a6f024d06bc8e838d6b110dd26befe535525c077ec2bd4a4f90d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 a7b9322bc8962e08eca292ed94e9670ee961379f3add764c8675b1742436fff9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 965b45f85872c7be2f73fd7a59540932ac6a615fca2bafd0c12387d34188fbaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 136683f1a99c2bd5f2b35689ec88e10413785ed2bdc29c08a74873b741b21c95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 ec1594125e08135dd176088c2086e6af4edd42c301781fa821d8f7d854ed791f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 cadefe7a944db2f02ebd52c85480423b121eab46ef49cc73003e443516731dd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 41188eed474cdb78ada4a6abca5751fac2529bda9b28360a0ab88cb55b280d3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\base_library.zip
        • Size 859KB
        • SHA256 0ad3fcf15710fcf27a3da247a3e03d62dbfddcafea16e271a60366de9e973cb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\python3.dll
        • Size 64KB
        • SHA256 dc909eb798a23ba8ee9f8e3f307d97755bc0d2dc0cb342cedae81fbbad32a8a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python310.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\python310.dll
        • Size 4.3MB
        • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\select.pyd
        • Size 29KB
        • SHA256 db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        style.qss

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\style.qss
        • Size 5KB
        • SHA256 748fd1f1f3a0a260c5b30bc3a1ac6cd7867b5a08f316773ef96c2a6f5d6ae92e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\ucrtbase.dll
        • Size 1.1MB
        • SHA256 0e7bcf5fbb0a061fca8d5bb669479e0ee7d7bd2e535d90c3b968bdb73c406445
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33802\unicodedata.pyd
        • Size 1.1MB
        • SHA256 1fb2d66c056f69e8bbdd8c6c910e72697874dae680264f8fb4b4df19af98aa2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/420-277-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-262-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-259-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-261-0x0000028C12450000-0x0000028C12460000-memory.dmp

        memory/420-260-0x00007FFCE2C10000-0x00007FFCE2E49000-memory.dmp

        memory/420-258-0x00007FFCE3DE0000-0x00007FFCE42BB000-memory.dmp

        memory/420-257-0x00007FFCE4CD0000-0x00007FFCE4F5F000-memory.dmp

        memory/420-290-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-291-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-263-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-265-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-275-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-287-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp

        memory/420-286-0x0000028C11DC0000-0x0000028C1240D000-memory.dmp