General
- Target Nylon Updated.exe
- Size 15.3MB
- Sample260816-cct4ksysav
- SHA256 253c056dd55aea4f95ed4407263e1d5080607ab2222dd073a3bbb548a98721d1
- MD5 338497605c388be200f2585ce7204dc4
- SHA1 b44edfbe6c2d9b1cbfdbfcc119fff9de709a39fc
- SHA512 99e8099f723608148269e8a55280b54b0cd77780604189cb5882754a203ed2aae788643ef4b8c54cb6f2e372893ec2e126f048a7da02bc776c6b77ae13deeba7
- SSDEEP 393216:YAUk2qvo+mFy+4+jojpgCLTvyWBuDinvgZG7A:xU6cTjo+mT6rivgo7A
- TLSH T152F622C13DE2819CC0A6C634E68A1BF9F0DA7AC94DBA481FBFC649023671D42CDE6575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nylon Updated.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Nylon Updated.exe
- Size 15.3MB
- SHA256 253c056dd55aea4f95ed4407263e1d5080607ab2222dd073a3bbb548a98721d1
- MD5 338497605c388be200f2585ce7204dc4
- SHA1 b44edfbe6c2d9b1cbfdbfcc119fff9de709a39fc
- SHA512 99e8099f723608148269e8a55280b54b0cd77780604189cb5882754a203ed2aae788643ef4b8c54cb6f2e372893ec2e126f048a7da02bc776c6b77ae13deeba7
- SSDEEP 393216:YAUk2qvo+mFy+4+jojpgCLTvyWBuDinvgZG7A:xU6cTjo+mT6rivgo7A
- TLSH T152F622C13DE2819CC0A6C634E68A1BF9F0DA7AC94DBA481FBFC649023671D42CDE6575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1