General
- Target Server nuker.exe
- Size 15.4MB
- Sample260722-1d79lavglb
- SHA256 6668a2afe15f1fe57a2053155b3bf914957875188843048d052ec2ad621f3e17
- MD5 9534da665bf62b3926853849c2ceaafd
- SHA1 0cf1e08e799bcf58ff31344d0ab4e91ddea69b2d
- SHA512 a93f36b65df3d43eafc0f760d67e390e9b730c041b09b88ff5ff486fd320e1f0f4376a2237d4c87aa31650535e08db5af54196deb760abb75fc30015c446fa85
- SSDEEP 393216:xMBU7GseFC+I/yr76hdZnnGCnGjyi2bjRovy7BEPNizQGeMADyAHX4M:4YECfa7KZnnGCnkyi2nRPGPNYQGeTDvI
- TLSH T1F9F63356A4E105E3FFD7463844DBE475EA78BE222772C4CF06AE91212E235F6603E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Server nuker.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server nuker.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Server nuker.exe
- Size 15.4MB
- SHA256 6668a2afe15f1fe57a2053155b3bf914957875188843048d052ec2ad621f3e17
- MD5 9534da665bf62b3926853849c2ceaafd
- SHA1 0cf1e08e799bcf58ff31344d0ab4e91ddea69b2d
- SHA512 a93f36b65df3d43eafc0f760d67e390e9b730c041b09b88ff5ff486fd320e1f0f4376a2237d4c87aa31650535e08db5af54196deb760abb75fc30015c446fa85
- SSDEEP 393216:xMBU7GseFC+I/yr76hdZnnGCnGjyi2bjRovy7BEPNizQGeMADyAHX4M:4YECfa7KZnnGCnkyi2nRPGPNYQGeTDvI
- TLSH T1F9F63356A4E105E3FFD7463844DBE475EA78BE222772C4CF06AE91212E235F6603E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.