Overview

overview

7

Static

static

3

nuker-.exe

windows10-2004-x64

7

nuker-.exe

windows10-ltsc_2021-x64

7

nuker-.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    31s
  • max time network
    35s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    10/07/2026, 03:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    nuker-.exe
  • Size 66.0MB
  • Sample260710-d9fswsdz5x
  • SHA256 72f324b115bbfeccddf177af96227e33949e792044059bf4e757ca085378b79d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 33 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\nuker-.exe
    "C:\Users\Admin\AppData\Local\Temp\nuker-.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4580
    • C:\Users\Admin\AppData\Local\Temp\nuker-.exe
      C:\Users\Admin\AppData\Local\Temp\nuker-.exe
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4756
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c discord/55a
        3⤵
          PID:5864
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c mode con: cols=125 lines=55
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:2904
          • C:\Windows\system32\mode.com
            mode con: cols=125 lines=55
            4⤵
              PID:1776
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c cls
            3⤵
              PID:932

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              _asyncio.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_asyncio.pyd
              • Size 71KB
              • SHA256 675587b1155c875ab27e24302d53f38e41febd3c080bc190c3e4ffbdb51fe76b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _bz2.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_bz2.pyd
              • Size 84KB
              • SHA256 b3dd7cea6d03342252834cebcc814af37d850b86d0627fa22b7f6990882f2f8b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _cffi_backend.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_cffi_backend.pyd
              • Size 176KB
              • SHA256 d5b09da2e726b4e90cf0edad5d2a0ec52f369dfd060e14d3807a32b2205031fa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _ctypes.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_ctypes.pyd
              • Size 130KB
              • SHA256 dfa65498c77e71f038883337d2b5ffd92508489e79e6ee5e96ddec4ecf2a7fa1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _hashlib.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_hashlib.pyd
              • Size 67KB
              • SHA256 1a3010b06c2fcd625dece3dd0883ca060e98b94adc062b06cb1a671cfc3b5caf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _lzma.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_lzma.pyd
              • Size 155KB
              • SHA256 f20be6a9fee8fb5d53170c4bc24a39b48d3c0ccbe8e2000e60ff7d65b77c6ea1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _overlapped.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_overlapped.pyd
              • Size 56KB
              • SHA256 626675dc9fc5c74beb72cd278322a8313b68b22161e34473f8b951c238e72185
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _socket.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_socket.pyd
              • Size 84KB
              • SHA256 127a39d2198f17dd9b573904fe7e4040c7c8718753e6c4edee2ff6c35f487fac
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _ssl.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_ssl.pyd
              • Size 177KB
              • SHA256 faf716d309349dbd54efd7fb402bd42ed21a537614ac0da89ed92ba307ecbf15
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _uuid.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_uuid.pyd
              • Size 27KB
              • SHA256 6748c182df6181cff8691da72dbb81f4f7f446ac7482d5dfe671f2b5333aed5d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _wmi.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\_wmi.pyd
              • Size 38KB
              • SHA256 3be5e14e9a9dc49f099209dee98b9cb5e31ade3b0deab52277026bb14df5bdb6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _http_parser.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\aiohttp\_http_parser.pyd
              • Size 243KB
              • SHA256 7887eb2b564ab4be8fdfe427e963eb0f57fd1f5cb4a7d44cf7a916e166c7cf66
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _http_writer.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\aiohttp\_http_writer.pyd
              • Size 45KB
              • SHA256 d0a67572078cd438ec81c95c4b83a5d0bc449a00829a9471953b323a720dbfcf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mask.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\aiohttp\_websocket\mask.pyd
              • Size 35KB
              • SHA256 4c0d339d53e9139bdde2aed60230ce8f12c85e0c9b0d80895d3628a056887254
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              reader_c.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\aiohttp\_websocket\reader_c.pyd
              • Size 143KB
              • SHA256 59c329569bbf27c53119f3065a72b1ea6ef3462f8bfface981cf9dd3fd1c08ad
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _audioop.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\audioop\_audioop.pyd
              • Size 48KB
              • SHA256 c9f875e7f6eb8ca8c9dddcf8f875e330f1b831b8ac042cfdb838fb2ae6cd40ef
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _frozenlist.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\frozenlist\_frozenlist.pyd
              • Size 66KB
              • SHA256 06579b025cf431d0d1b5ba34ce585ef35a6ffc5016d53e221dc3020e067c047d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libcrypto-3.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\libcrypto-3.dll
              • Size 5.0MB
              • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libffi-8.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\libffi-8.dll
              • Size 38KB
              • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libssl-3.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\libssl-3.dll
              • Size 776KB
              • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _multidict.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\multidict\_multidict.pyd
              • Size 78KB
              • SHA256 04a6693ccc24d454c897c6e42608c121cb54f11df95a015589833e13f5de4da4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _sodium.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\nacl\_sodium.pyd
              • Size 340KB
              • SHA256 d733c23c6a4b21625a4ff07f6562ba882bcbdb0f50826269419d8de0574f88cd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nuker-.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\nuker-.dll
              • Size 41.1MB
              • SHA256 ad737fb1dd992cbf7877b3ebba86321b6619a191fa4a1f299ace271d2041b75d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _helpers_c.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\propcache\_helpers_c.pyd
              • Size 62KB
              • SHA256 431e731cac6e09e583fe262a9f0b9a31ce43860b1f4411e5cb9032f249d7420c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              python3.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\python3.dll
              • Size 70KB
              • SHA256 4ae581aa4e65fef9f92c84c428c990892da538b4d9289592df51fa31fd879770
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              python313.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\python313.dll
              • Size 5.8MB
              • SHA256 41ec4fc4e5bc8b207258590238f7f050b13fdfee84c4a7b1ecff6e945d031a10
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              select.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\select.pyd
              • Size 32KB
              • SHA256 9cc1ef0264060099503592db57ee7d7c1f8d6bea689b2ed125919c7a30b7ab7f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              unicodedata.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\unicodedata.pyd
              • Size 695KB
              • SHA256 1989628f16052f9123c5cf603e96490a75fde6228315457556f96a838bf9e904
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vcruntime140.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\vcruntime140.dll
              • Size 117KB
              • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vcruntime140_1.dll
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\vcruntime140_1.dll
              • Size 48KB
              • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              _quoting_c.pyd
              • Path C:\Users\Admin\AppData\Local\Temp\onefile_4580_765742_qG6Fu_wN-3s\yarl\_quoting_c.pyd
              • Size 84KB
              • SHA256 622c862d21143e8e5272e9a861d4fcc8f3ff742a1b56cf9588dc5781c0533bd9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download