General

  • Target
    Nexus-MultiTool.zip
  • Size 28KB
  • Sample260720-c926fsfx3z
  • SHA256 5b6980803f88f9600e5d5adf19b0b6b7fa33697e03902efc58141e6f37ccc55d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Nexus-MultiTool/Nexus.py
    • Size 91KB
    • SHA256 5872a4d3b7056414d8dcd4eb3d9692f5cc77d49e9f13f0bf4d3ac13b91daac0d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Nexus-MultiTool/run.bat
    • Size 110B
    • SHA256 66dfddbfbb370e23a5caf53333d4f63c250f4a8cedceac1b77f1b18122db6491
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks