Resubmissions

02/06/2026, 00:07

260602-aekltaax5l8

02/06/2026, 00:00

260602-aaql9shs8s8

01/06/2026, 16:37

260601-t46ecsb12p5

General

  • Target
    nvsp-manip.dll
  • Size 265KB
  • Sample260602-aekltaax5l
  • SHA256 224d968761bbf28541b8b80ba789e450fc38a4d8f45839b28594ae96e8912193
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      nvsp-manip.dll
    • Size 265KB
    • SHA256 224d968761bbf28541b8b80ba789e450fc38a4d8f45839b28594ae96e8912193
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

MITRE ATT&CK Enterprise v16

Tasks