Overview

overview

7

Static

static

3

NX.Optimiz....0.exe

windows10-2004-x64

7

NX.Optimiz....0.exe

windows11-21h2-x64

7

run.pyc

windows10-2004-x64

3

run.pyc

windows11-21h2-x64

3

Resubmissions

04/06/2026, 10:18

260604-mb8wfsdv2q

04/06/2026, 10:14

260604-l9vwtadt7p7

Sharing

Copy URL Twitter E-mail

General

  • Target
    NX.Optimizer.3.2.0.exe
  • Size 58.9MB
  • Sample260604-l9vwtadt7p
  • SHA256 fe305c9dfbfa090c14014124d18c4a3c597c6fddcabc18d321e3d4090fd40e74
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypyinstallerransomware

Malware Config

Targets

    • Target
      NX.Optimizer.3.2.0.exe
    • Size 58.9MB
    • SHA256 fe305c9dfbfa090c14014124d18c4a3c597c6fddcabc18d321e3d4090fd40e74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2
    • Target
      run.pyc
    • Size 2KB
    • SHA256 aab34ce9078c87cfeaacac054b96683ca960597ded253d975d16238c6580c028
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    ransomware
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks