General
- Target nasnavi-316.exe
- Size 8.4MB
- Sample260810-tweaxaysa1
- SHA256 3b08f8045b6e7c095ab83bacea4814f87cce0e52fe2102c4e7e3b77778fd4cfe
- MD5 e6a608645e1383a5467dc76cebbe1ace
- SHA1 77623b39ab665334866fc766416cf266f9d0fc54
- SHA512 93a3fefb1e9a699e1778e8073544fa96e1150504d4189ee493a01f8e206bedf6a1ee2b8a522a14aa1f2468c614828ed0ea12b997ea7410b314de69a9c5119a74
- SSDEEP 196608:Vm7KjXEAUe/l7LUhAT9U+r1j0Ip0SC5jikjmeH/nQBj5N8v5hVx:keXRLQa9Hpj5S/1ikHQBo
- TLSH T17C963313BBC590B2D91B187298745BB4C23E74619F209AD7B3C8AD5C19B15E18B3B32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nasnavi-316.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
nasnavi-316.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target nasnavi-316.exe
- Size 8.4MB
- SHA256 3b08f8045b6e7c095ab83bacea4814f87cce0e52fe2102c4e7e3b77778fd4cfe
- MD5 e6a608645e1383a5467dc76cebbe1ace
- SHA1 77623b39ab665334866fc766416cf266f9d0fc54
- SHA512 93a3fefb1e9a699e1778e8073544fa96e1150504d4189ee493a01f8e206bedf6a1ee2b8a522a14aa1f2468c614828ed0ea12b997ea7410b314de69a9c5119a74
- SSDEEP 196608:Vm7KjXEAUe/l7LUhAT9U+r1j0Ip0SC5jikjmeH/nQBj5N8v5hVx:keXRLQa9Hpj5S/1ikHQBo
- TLSH T17C963313BBC590B2D91B187298745BB4C23E74619F209AD7B3C8AD5C19B15E18B3B32F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1