Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/08/2026, 08:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nebula.Client.-.@tg_nosyarg.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nebula.Client.-.@tg_nosyarg.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Nebula.Client.-.@tg_nosyarg.dll
- Size 197KB
- Sample260802-kb54fsff74
- SHA256 86276ff8fc3a0e7d1f643d155b5a6de337ac606fa931f78d839b6745b1947a90
- MD5 97f1e3b0ca0ad10903bb6f5d75db3071
- SHA1 b9c0b7b4ecee839d3c8087f7337f6cd3db8cbbad
- SHA512 77f34a95e1be931fa8b04a7c18913388c98cf9fd928861ffdc33344daa45a822f1c1ff9ac39481a661630578ddd58df456d8c9eca5db651cd7598429f848a39a
- SSDEEP 3072:Ak2Rrc/+qGes25frVQz+tqpA8ivuB2Ph6RqV1HwNohRnHNrZPHD:l2Rrc7s2JrVECuk6MVZyeRfP
- TLSH T19D149361A3FA5520F6FE2B7E2D7255801B31F913BA31C61D0EC1A4DF1D32BA259047AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Nebula.Client.-.@tg_nosyarg.dll,#11⤵PID:4284
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2064