Overview
overview
7Static
static
3fad33c468c...eb.exe
windows10-2004-x64
7fad33c468c...eb.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/utils.dll
windows10-2004-x64
3$PLUGINSDIR/utils.dll
windows11-ltsc_2024-x64
3Microsoft....ap.dll
windows10-2004-x64
1Microsoft....ap.dll
windows11-ltsc_2024-x64
1nationwide.exe
windows10-2004-x64
1nationwide.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
0s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/07/2026, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
fad33c468c8ef7a67ab53907a0d2c5ddadc4ef50fd35507b1e2f80be841c14eb.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fad33c468c8ef7a67ab53907a0d2c5ddadc4ef50fd35507b1e2f80be841c14eb.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Microsoft.WindowsAppRuntime.Bootstrap.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Microsoft.WindowsAppRuntime.Bootstrap.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
nationwide.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
nationwide.exe
Resource
win11ltsc2024-20260709-en
General
- Target nationwide.exe
- Size 186KB
- Sample260728-e2wd2seh96
- SHA256 27eceee997c135653f992d1bac7e013d219108b8fc08078911afa4b5bce5d2ea
- MD5 0a8819d828c93251c4ad2bbb1a42f8a7
- SHA1 627578ffef6dc402c55fab1380d0054bca47860b
- SHA512 f074bd60fc7cf801659a3bbf1488536762883d63e4721d5a8e6d7c230c2513adb69d095eb30ea7da8558d23f6efa66a0ed520346d91e81a7b48be39c370fd6bd
- SSDEEP 3072:RLEs+CGsZUhmLXostDi7z9GJ7jmUsrgfSu1Pb:GsVFUELYIMYZpP1D
- TLSH T118145B4772A820F9E0678279C8914A05FB72B8711B60ABDF0364837B5F337D19D7AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2544 nationwide.exe Token: SeDebugPrivilege 2544 nationwide.exe