f644e5c0ebeeca10069d5cf0c68af17240c9894d95923bc287a7bdd36b9280fe | Triage™

Login
Reports

Overview

overview

6

Static

static

3

nikkeminil...us.exe

windows10-2004-x64

6

nikkeminil...us.exe

windows11-ltsc_2024-x64

6

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows11-ltsc_2024-x64

3

LogConfig.ini

windows10-2004-x64

1

LogConfig.ini

windows11-ltsc_2024-x64

1

Minidown.xml

windows10-2004-x64

3

Minidown.xml

windows11-ltsc_2024-x64

1

bugreport.ini

windows10-2004-x64

1

bugreport.ini

windows11-ltsc_2024-x64

1

error_code.json

windows10-2004-x64

3

error_code.json

windows11-ltsc_2024-x64

3

icon.ico

windows10-2004-x64

3

icon.ico

windows11-ltsc_2024-x64

3

install_script.dat

windows10-2004-x64

3

install_script.dat

windows11-ltsc_2024-x64

3

nikkeminiloader.exe

windows10-2004-x64

6

nikkeminiloader.exe

windows11-ltsc_2024-x64

6

res.zip

windows10-2004-x64

1

res.zip

windows11-ltsc_2024-x64

1

Hover_et.png

windows10-2004-x64

1

Hover_et.png

windows11-ltsc_2024-x64

1

[email protected]

windows10-2004-x64

1

[email protected]

windows11-ltsc_2024-x64

1

Normal_Popup.png

windows10-2004-x64

1

Normal_Popup.png

windows11-ltsc_2024-x64

1

[email protected]

windows10-2004-x64

1

[email protected]

windows11-ltsc_2024-x64

1

Normal_Popup_red.png

windows10-2004-x64

1

Normal_Popup_red.png

windows11-ltsc_2024-x64

1

[email protected]

windows10-2004-x64

1

[email protected]

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
nikkeminiloader_aq84jigzveb.wg.intl.virus.exe
Size 9.0MB
Sample260813-tl3krasyhw
SHA256 f644e5c0ebeeca10069d5cf0c68af17240c9894d95923bc287a7bdd36b9280fe
MD5 4a9f6cb099a1f6763c3a8e2656a9f9d2
SHA1 0bae8273091cd33b6cd321346fabfd0e831fb073
SHA512 2885316d7f7b58147bf0be8992ff0d0d6c9b26ecf1c26a767d7320866a2e9c47746a22354abc4cddb529ae8b93f6a6599ef63109679a40fb56ca02248609426d
SSDEEP 196608:EIBgyIPpswqoFFuY0Pd/xrF8AIO8muSTs5Lb/RgzoD:ZgyLwqdfuGP0Rb/Rgs
TLSH
T15396339972D02047ED66487AF13985B212D3ECFD1E30E96603EBFE2F3A395576C48426
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery execution ransomware spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

nikkeminiloader_aq84jigzveb.wg.intl.virus.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

nikkeminiloader_aq84jigzveb.wg.intl.virus.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/NSISPlugin.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/NSISPlugin.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

LogConfig.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

LogConfig.ini

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Minidown.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

Minidown.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

bugreport.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

bugreport.ini

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

error_code.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

error_code.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

icon.ico

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

icon.ico

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

install_script.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

install_script.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

nikkeminiloader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

nikkeminiloader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

res.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

res.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Hover_et.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Hover_et.png

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

[email protected]

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

[email protected]

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Normal_Popup.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

Normal_Popup.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

[email protected]

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

[email protected]

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Normal_Popup_red.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

Normal_Popup_red.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

[email protected]

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

[email protected]

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  nikkeminiloader_aq84jigzveb.wg.intl.virus.exe
- Size 9.0MB
- SHA256 f644e5c0ebeeca10069d5cf0c68af17240c9894d95923bc287a7bdd36b9280fe
- MD5 4a9f6cb099a1f6763c3a8e2656a9f9d2
- SHA1 0bae8273091cd33b6cd321346fabfd0e831fb073
- SHA512 2885316d7f7b58147bf0be8992ff0d0d6c9b26ecf1c26a767d7320866a2e9c47746a22354abc4cddb529ae8b93f6a6599ef63109679a40fb56ca02248609426d
- SSDEEP 196608:EIBgyIPpswqoFFuY0Pd/xrF8AIO8muSTs5Lb/RgzoD:ZgyLwqdfuGP0Rb/Rgs
- TLSH
  T15396339972D02047ED66487AF13985B212D3ECFD1E30E96603EBFE2F3A395576C48426
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISPlugin.dll
- Size 1.0MB
- SHA256 1b9a09720ab5f6fed43d366cdf1d314b15e29e4eeabefdc528bf4053a0c1b0ef
- MD5 7c1b00e82c60c4850fcb098d48c40410
- SHA1 4430e0632c75ca4a8ef5093a70b6e82ec7d3de3f
- SHA512 8a089435e5e4291526041362d3247ab46c95d2c2669ef1530a8029b6c898e8ee23fa5af9dd43bbdb27e1c51f74ce588068611db52954dd750219169d2f7e97c8
- SSDEEP 24576:MN7rmqhBdVUSpMqn2prMjE5RtqecX+UNvSgpT9FqrQyKo:Ut72lpa9TTCrQyK
- TLSH
  T17E356B00F28280F4E99656702DBAD77A9B357E464F1586C7F394FF9E29322E1E53130A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  LogConfig.ini
- Size 113B
- SHA256 e8a59173f505dbedf4dd37eec210e5e539a243e46f521a8ba8d2ec13fd99d29f
- MD5 1e8cf5946a37d9a084be613554260815
- SHA1 94b5aee19918d59c83785ac27de9c7c076f12091
- SHA512 abe7ebaf55dbccb4fc8c1a39c36427f381568642dde0855208244133cae23dbca7a8776c3b67303673413ed6047574e22e349697bfb22fe5f9395bcf86f8a2cb
- TLSH
  T127B092223D888200A4261B20813886C650760926DAE56E54A8589C2F1822E0E09107AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Minidown.xml
- Size 2KB
- SHA256 b2289e8bfcfb9c1ff1f6dc9c462c929f6b5f8b684e059efce657e4dfc156c64e
- MD5 6763fc24c42f514d9943ca133513c811
- SHA1 4dfd8104724435c774a4cad875f857cf7e425780
- SHA512 03acafb8ba630af9ad87671d451d04da35fca10e46577b5f0e8f20701714f52e39f9920c2a0ff740119c85b99cf916a9074d8223e5de14abd34d887b768bc7f9
- TLSH
  T105513BCA319F8336D128314BCA9F7ADA3A0A524EA0E1C4956C99EA143904F21587023F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  bugreport.ini
- Size 738B
- SHA256 ed60ca6895464814f9e5bc132f41645630cc785fae9fc7da6362b5690b3a97cd
- MD5 27ec1e105337c0ad4bddb8f2a9551f6c
- SHA1 c77d348eb0130390f39915d0b680cab3f4d5329c
- SHA512 5ac5ed78fee4e8cd2ff96915cb0f7dd4d39367fa38e89f0058a66cc70af8ef84f5550e48e12343257b0cc9611074acabc865339d948bdfef2cba6c42137bda05
- TLSH
  T1C70115784A2E971D4E844EE50C2F358295DC467A09447E4880AB16DD7697C1F713F2D3
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  error_code.json
- Size 346KB
- SHA256 ba2d92cc27b62969fc7e016bfe5535b03a45c9f32c78efb2e1018d590ae6bc60
- MD5 3e69d25e4de00840b4ef97f890d1687f
- SHA1 2b24116474e432bc5aba9789a4b22e6dd8511561
- SHA512 cf1d0935c68bd42747d8434a0ceea00c6f1eb10b70698673b3a6637331208e7e139451c506a18bf64d6b7c94ad72b27ca88992e81f44c8358636d1771969fbf6
- SSDEEP 6144:900nuL5Spvu14yxwkXtSGQBocvKTgCvOpwMGHa7EN28:900nuL5SpvFrBf2
- TLSH
  T110743D26C18C0D9BB88149169C063596B6A46B1B7F2274ECB71CD81D1FDCA1F93398BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  icon.ico
- Size 347KB
- SHA256 b61e7ea07166485b095bfe2012575fa15d193a9c828eeb4785733c2f2449ae36
- MD5 819c71721dba5cfe710371073c8ef15d
- SHA1 4303425a03c354e22d9b10c72236eaeadd857982
- SHA512 96071daa8caeadb61bf87e6ca7d9ef220d20064ef75d55eae1b1bc2c6d736f0cceb7a1d3c52a16017342db9324fcf833ccce691ffec25b1a834f49b1ff47a0f1
- SSDEEP 6144:Jde3+rtkRbdMymqPgg/z7gXDKFnn4bMw1qgZRiQ6ltyiBww:q+5KbN4+MqgrCBp
- TLSH
  T17274D06F79C2E049D4EB49BDC206C07461C36CBC59B2A8A216CDBF2F351E67B8D9C419
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  install_script.dat
- Size 2KB
- SHA256 68effb50661661436471d0140015a5438af23e9e3449a73fb73f9dc4fd039456
- MD5 94622f521e9bb94672a99ff389d33676
- SHA1 013abfc33619124d319e9eff48bb411d725db292
- SHA512 bef77cc9c279f3d7a4ccc10d365921617bd864d4c7bb22b6794d4ff7d85dd600a221e9107dde3d8f81d5d35a963d9766891e2c425205cc5fbf6bc6d14efa133a
- TLSH
  T110510658ECB48E7780C5771C120E8A2B226112AB39843EEE77AC440D4F1E77F15F665D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  nikkeminiloader.exe
- Size 5.1MB
- SHA256 ba944005a99ea940ae08b53374291b78263f61cda594840a48a59b037c266da6
- MD5 7b5f2f6e75ad1d96d694254bb74117fd
- SHA1 b26ccbdfa3f9e9e4cd081bd36fce79da3c3e5812
- SHA512 5b002d049eb7a230fcd16253c98162658fe28f3d95ceb62d5b3172c60537b681503502ba10873126f92249d985e8716ed8cd8b4dcdb770bbf931277a93da562f
- SSDEEP 98304:NcLsuPSAop5/4URGRJtFxBr8EnUdDU+AkDuFYBVwsoz90fmSAx3:wq+kGXYEnkuFYBvoz2AZ
- TLSH
  T17D36AE02BA8150B2E9B242301D76FFB995BFAF240F74A5C362943B1D5D351C2493E6AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  res.zip
- Size 2.9MB
- SHA256 02623b2630bde9fb743b74ac4713a1307d03eb07f81d096f5dfdfa4034d7ae94
- MD5 183ca324cba60da4b6b502c4c31fc0a1
- SHA1 643c43a9d64c43a0f2493f0135c2475a55958142
- SHA512 4df90b6170a097beb837a35b965ca7572cb4acc6d023a2707a251a8cf0d1aea1986a21321075aa7fb872d683e7b6dd978940ae9728f99c4eceaf1ef9fecc6929
- SSDEEP 49152:irA6Q79AOx1Fi6udhH7LOAkYMlRvg7A2NhBaUhc2csOKW3pqvX5t7TsdVw9YyKp2:iS79pFiDdNLOAQbqAgBaUh9E5qfTTsdi
- TLSH
  T1B9E533FFA94C8880C6B20A7394756171373E52568B0C57467827EC6D8EF3689FF4278A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Hover_et.png
- Size 350B
- SHA256 3dd4f9513348d7e65e484ced3df7f51ad72f28b0c1922cdba3f3334b3b4539fa
- MD5 d0f9c85a88cfaf4d90fbbe6ba0935ec8
- SHA1 8868fa8f912eb012e88946f4805267ec8bb2156b
- SHA512 1ffa741c7b58477447d6aa420ccd32d671a70a281dde120a6d31512449ea143957784625610ad509baacbf5ed81153426f6b5edd93151f5a0399d6c4d2ccf186
- TLSH
  T1A5E0C0DBB544DC40E784467286ED8324FC27048C7766AF5F0516A47FC406C9C9281556
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  [email protected]
- Size 936B
- SHA256 df79e18afa636758ead514e9990ef76b6ccfbbb76abfa93600460af53bec9b9a
- MD5 74b9d873323838cb67797a346bf17e60
- SHA1 4f2533691783525872ba2bf6e71d9098e0b25b8b
- SHA512 9b4b0acdc3b2c2a361a9734c8c27a0988f78bdc63a4f146c51a9bcfcbcf4cceab28cc5f965c99f58ced269fd1e8e0f1608e9a9b946f4963b2d67d2a538e0ee25
- TLSH
  T1A211C4C6F8368EC2D060062D53C4F07B093FAB098C21ECD0B2883696206E64ED0E83AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Normal_Popup.png
- Size 5KB
- SHA256 89fdd74995e6f46eac23e9e8046377215e1c2e571138ac22a942328835d6f9fc
- MD5 6ded3fc284f28257ece5a0d323433e28
- SHA1 0615bb0abb91e747fcc8ccc5b30eb339607b3dfd
- SHA512 5c8f51e3e7cf59481c61965b73303565f6008334aa6ce21fcd58bc083037a9c724314dff81dc73a0a8acf053a7d18d4dd6f96463becf39b61e7e92eab9c5d52f
- SSDEEP 96:kc4ZRQNcHawPUgdLal4BJy9aky98ZqWV86hBV:kPj5Ug84BY7y980WV9l
- TLSH
  T114B13A2AC845E05D22B4C4D023633527672441D3A6B21FE96F6D042BEE6354EFF7AAA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  [email protected]
- Size 14KB
- SHA256 598e76e2c2eeade617883c4602cfc3201727216d82aebed0eecbf84a0c49aecb
- MD5 4aebb8ecfbecfcd58fa7656d3bd35164
- SHA1 1676f7dfb9576de054ae9283a790b41347b5cd68
- SHA512 c4af0df71eb45fec475a531ce1f439e6630169563239fc0ef3202811311248b401b76c6ac0d9758d1981fcaf01ef7dd3240730fc78c5526cf4cc8df1ad49a684
- SSDEEP 192:+qAYrawie/plFj2m8dKwA+C8XE5Iw1/VfhCJRmYt8cmNEJt7ZM6R7yPmnYA/D7Jt:EC6NyV5R/wmrspZAPUYK1uub
- TLSH
  T10562F661DB829C3B321402067285587B44D9ADB3B8B0DE2C59D7B96F2323FB24DB9C56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Normal_Popup_red.png
- Size 4KB
- SHA256 ef429fe8578d98216aa00f0801164a3bd80da8aa3ac8e61a19111d521871f5be
- MD5 1f85b8aac1fd35a2dc31923af20b1aee
- SHA1 048e7c238b0444802c2483c8294206ce5dd7e06f
- SHA512 80db4993e7e9e1eedf4cfc97a92dd7119d67cd4bdc20c7325c8aad9f61710600f5f1cb071c2197e6bc30ac1035eb7a43160ccee88bede161f4c2359a71f6e3f9
- SSDEEP 96:oFsdffXAUPQugmDfuSa0b/0D1kgLwkJN7sKgO1cnxMF2mlig4CY7a:oFsdffQUYu/qJN7sKgTmFpcg4CYm
- TLSH
  T1EC915DB3DD7916D33F7279F6416301523E75445760BEE6B12DE22E668309AFB3021E81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  [email protected]
- Size 12KB
- SHA256 5dbd4a91cc87d7b33486ebb08fac154edfb1e62973ae585ec15ae7e80aec3fef
- MD5 59a8511dd06ef505df83e7596d50a7d5
- SHA1 8c1ace5c067b48b187245411fa62af41b67f54a8
- SHA512 80fd27d1f7f3ef162745e534d2147047e3c14f73b95ab858dda4dbdcef449e44240bc6e56f294558ae206abd8e6494b5bd60a2e921ffda892631e3e63e1d1201
- SSDEEP 384:3XCPuC1u+G1r7O111111mk9/wrDRCTkKBf:3XCmC1u+Gl71kw0Tkyf
- TLSH
  T113425B4EE7114937B61E48897882880B00D05DB77A68DD0B54D7BD1F2B6BF782CB0E5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy