Analysis
- user interaction
yes - max time kernel
298s - max time network
298s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
28/07/2026, 10:22
General
- Target 28072026_1022_Nexu63.exe
- Size 807KB
- Sample260728-menppafr8t
- SHA256 37d9b8badf3380cbff5804ae93a41d7ac2feec112f77c7d468f3b9b832d8f8a9
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28072026_1022_Nexu63.exe"C:\Users\Admin\AppData\Local\Temp\28072026_1022_Nexu63.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2624-0-0x0000000074312000-0x0000000074313000-memory.dmp
memory/2624-1-0x00000000000D0000-0x00000000001A0000-memory.dmp
memory/2624-2-0x0000000074300000-0x0000000074ABC000-memory.dmp
memory/2624-3-0x0000000004C70000-0x0000000004CEC000-memory.dmp
memory/2624-4-0x0000000005160000-0x0000000005238000-memory.dmp
memory/2624-5-0x00000000050B0000-0x00000000050FC000-memory.dmp
memory/2624-6-0x0000000074312000-0x0000000074313000-memory.dmp
memory/2624-7-0x0000000074300000-0x0000000074ABC000-memory.dmp