General
- Target nexus-25.9-installer_aIRld-1.exe
- Size 5.2MB
- Sample260620-b9lysscx8p
- SHA256 4bb5e49db369031c232a6ee262d791b8be60368bfd8734455fdf173ce42da016
- MD5 79f459458962e1a472d7953f51fce7c4
- SHA1 48e35bd38f785c58b1de9f02fe24ae2b1501fd98
- SHA512 22c18aeee9fa02302736102c52acdc5d9f5b8e54db600e571e2ea59fffa994600313432bf4930465e14af2be84db17928f3bb0595c5021838b7e4796b71ea45d
- SSDEEP 98304:g5OqMWrURINHAa2JiCdJ9YKzoFOqQtAwKLoa2rk2A44D5kmu:k/MSURXNYKzogqQtAwKLD242r4ju
- TLSH T18D46023BA18BE53EE07A5A3539B2911058FB7F6D65124C069AE4F44CCF360B01D3E6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nexus-25.9-installer_aIRld-1.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target nexus-25.9-installer_aIRld-1.exe
- Size 5.2MB
- SHA256 4bb5e49db369031c232a6ee262d791b8be60368bfd8734455fdf173ce42da016
- MD5 79f459458962e1a472d7953f51fce7c4
- SHA1 48e35bd38f785c58b1de9f02fe24ae2b1501fd98
- SHA512 22c18aeee9fa02302736102c52acdc5d9f5b8e54db600e571e2ea59fffa994600313432bf4930465e14af2be84db17928f3bb0595c5021838b7e4796b71ea45d
- SSDEEP 98304:g5OqMWrURINHAa2JiCdJ9YKzoFOqQtAwKLoa2rk2A44D5kmu:k/MSURXNYKzogqQtAwKLD242r4ju
- TLSH T18D46023BA18BE53EE07A5A3539B2911058FB7F6D65124C069AE4F44CCF360B01D3E6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.