General
- Target Nexomia.exe
- Size 15.8MB
- Sample260723-xp6clattgs
- SHA256 11a50c4d96c302448155e5446e20177a95464fcca340e62955da54d5021d72d3
- MD5 ef9cd67e4dc61468f9bbd87056cf8e31
- SHA1 d96bb125428d48f3fea9dc55e5b37d33eb6e3e89
- SHA512 bbb5bc4dee3c4beacc7c3140471d0a288cb651964087d39a71a6a3887d78dc84e99c76dd1acd49e9ae69ae235f0986da53e319e0d4b7244442992a4f8d70244b
- SSDEEP 393216:DJ5FDDvTgbdmEg8zrwnxxKWNzCkgYjGf:DJ5FDDb6Pkxka1gYif
- TLSH T178F69C43F66280F8C16AC075835A6233FA21BC494B347AEB5BE44B253E65FD06B3DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nexomia.exe
Resource
win11-20260513-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target Nexomia.exe
- Size 15.8MB
- SHA256 11a50c4d96c302448155e5446e20177a95464fcca340e62955da54d5021d72d3
- MD5 ef9cd67e4dc61468f9bbd87056cf8e31
- SHA1 d96bb125428d48f3fea9dc55e5b37d33eb6e3e89
- SHA512 bbb5bc4dee3c4beacc7c3140471d0a288cb651964087d39a71a6a3887d78dc84e99c76dd1acd49e9ae69ae235f0986da53e319e0d4b7244442992a4f8d70244b
- SSDEEP 393216:DJ5FDDvTgbdmEg8zrwnxxKWNzCkgYjGf:DJ5FDDb6Pkxka1gYif
- TLSH T178F69C43F66280F8C16AC075835A6233FA21BC494B347AEB5BE44B253E65FD06B3DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger