General
- Target NexusMods.exe
- Size 10.5MB
- Sample260709-dcqxlab14q
- SHA256 f147787fcb8e4afd28298b217a0b0c023a750ebdf33d48cd8f7255d2349876df
- MD5 6ca721e400148d60bf5d1eab3e115c04
- SHA1 e315a0448522bfa73da78eb43a2d2088f8a05f06
- SHA512 001d1b044e7a16f42f613510c0b27012a0ec0393448efef0d7be0726007c4b6ea1064fcceedd13d3df536dfd58454376f1ec02fd0881c761e2d71394d81bbbe7
- SSDEEP 49152:FATO0GILCbQ6nBQwEeygpI1qSWihTbviZZS4Acs+oeojrpLI2oBdienqZe95Zurd:SYnTNNLfoeojwdph9LurHHsfN872hM
- TLSH T1DFB6F66B6EE58368C11ECD3EC45A8B41DAF37E740737C3D702A127389AA15CC5DBA621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexusMods.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NexusMods.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target NexusMods.exe
- Size 10.5MB
- SHA256 f147787fcb8e4afd28298b217a0b0c023a750ebdf33d48cd8f7255d2349876df
- MD5 6ca721e400148d60bf5d1eab3e115c04
- SHA1 e315a0448522bfa73da78eb43a2d2088f8a05f06
- SHA512 001d1b044e7a16f42f613510c0b27012a0ec0393448efef0d7be0726007c4b6ea1064fcceedd13d3df536dfd58454376f1ec02fd0881c761e2d71394d81bbbe7
- SSDEEP 49152:FATO0GILCbQ6nBQwEeygpI1qSWihTbviZZS4Acs+oeojrpLI2oBdienqZe95Zurd:SYnTNNLfoeojwdph9LurHHsfN872hM
- TLSH T1DFB6F66B6EE58368C11ECD3EC45A8B41DAF37E740737C3D702A127389AA15CC5DBA621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.