General
- Target Nexomia.exe
- Size 16.5MB
- Sample260801-ygfmmsvepg
- SHA256 ac2351d21649bbe92bb010d83df9b2ae3b9e07aab14f7ed208e8345876d9c5cf
- MD5 8c28d6221241184064be6cf45b9707ee
- SHA1 c54be190f2d482c54089697418fd90753c21f106
- SHA512 8dd2ec51bdf2b3aea2d6a0606f3153163e547ee0b6244fa3296e43b77f3976b25652909769e5b39c8bd44c125da551069fe0fd49f83e016e77f4228313a217ab
- SSDEEP 393216:0KY1xuBpIHz8qBESLKKzCkv6QBYPCggSbA:0KCxuBo8qBcY1v6AYqEb
- TLSH T18307AD43F66280F8C16AC075835A6232FB31BC4907357AEB5BE44A253E66FD06B3DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target Nexomia.exe
- Size 16.5MB
- SHA256 ac2351d21649bbe92bb010d83df9b2ae3b9e07aab14f7ed208e8345876d9c5cf
- MD5 8c28d6221241184064be6cf45b9707ee
- SHA1 c54be190f2d482c54089697418fd90753c21f106
- SHA512 8dd2ec51bdf2b3aea2d6a0606f3153163e547ee0b6244fa3296e43b77f3976b25652909769e5b39c8bd44c125da551069fe0fd49f83e016e77f4228313a217ab
- SSDEEP 393216:0KY1xuBpIHz8qBESLKKzCkv6QBYPCggSbA:0KCxuBo8qBcY1v6AYqEb
- TLSH T18307AD43F66280F8C16AC075835A6232FB31BC4907357AEB5BE44A253E66FD06B3DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1