General
- Target Nuvio-Windows-x64-0.1.10-alpha.msi
- Size 165.6MB
- Sample260703-lph2hsbv9p
- SHA256 3eacb3e95f470f33ad200a2a0f9980238fd7f30bd151432626b501c926bcadbe
- MD5 a7fd72c1aadeb3d62bcdb0f2f439ad21
- SHA1 203710431ec606ca84c5d91ff84e7cb703ee56f1
- SHA512 dd550c4f0ae7e4e837218d75a6fa740bb36092f748b8b3e4a9b9f08c59cf3790b53dae07282128a0bbdd3a882fbd45e17b27fd0ff7f5d6b95c1216a65b057353
- SSDEEP 3145728:KcjsjBIZh2lP/oxo5QD8qJgTd79QaOZjPmNQkP/N3l:Ns6vCmYQD9UhWtjCv7
- TLSH T17E883313FD774070D662BD3685F147D9CA2C78398021CE6AF364B1A9DBE27D00ABA6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nuvio-Windows-x64-0.1.10-alpha.msi
Resource
win10v2004-20260513-en
22 signatures
300 seconds
Behavioral task
behavioral2
Sample
Nuvio-Windows-x64-0.1.10-alpha.msi
Resource
win11ltsc2024-20260629-en
21 signatures
300 seconds
Malware Config
Targets
-
- Target Nuvio-Windows-x64-0.1.10-alpha.msi
- Size 165.6MB
- SHA256 3eacb3e95f470f33ad200a2a0f9980238fd7f30bd151432626b501c926bcadbe
- MD5 a7fd72c1aadeb3d62bcdb0f2f439ad21
- SHA1 203710431ec606ca84c5d91ff84e7cb703ee56f1
- SHA512 dd550c4f0ae7e4e837218d75a6fa740bb36092f748b8b3e4a9b9f08c59cf3790b53dae07282128a0bbdd3a882fbd45e17b27fd0ff7f5d6b95c1216a65b057353
- SSDEEP 3145728:KcjsjBIZh2lP/oxo5QD8qJgTd79QaOZjPmNQkP/N3l:Ns6vCmYQD9UhWtjCv7
- TLSH T17E883313FD774070D662BD3685F147D9CA2C78398021CE6AF364B1A9DBE27D00ABA6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.