Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - user interaction
yes - max time kernel
88s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/08/2026, 13:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexomiaUI_v6.93.205.exe
Resource
win11-20260513-en
2 signatures
900 seconds
General
- Target NexomiaUI_v6.93.205.exe
- Size 86.1MB
- Sample260816-q4bcfack5x
- SHA256 ddf46c41a99771cd9b1f92fcda03a33f19451dd8d3816cd3f6b728ba4318ff60
- MD5 4bafc7c4fb7198556eb8632084527dd9
- SHA1 2784238966c16e999c0e94a3114e7c865778aa26
- SHA512 48214163763458b36f606d1956cb9e662650a5cf1774958f5e569b01a00fc611fee8f22c488a062e2032552aaa6723edf3f5722d4c3ce2960cf8080497b61f43
- SSDEEP 1572864:wYdhLAMVs8hxBF5aMnQ/hsDXYcPqhih2gtFm6yYyOkeUzaTAteI/lI:wYhXVrhxBFRQ/MNP662guhYyBhdI
- TLSH T16D1833477C5A81B9C8A39338496A4581BAB5BC18DB3A33CF6E50F6753F317D09A38B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 800 NexomiaUI_v6.93.205.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 800 NexomiaUI_v6.93.205.exe 800 NexomiaUI_v6.93.205.exe 800 NexomiaUI_v6.93.205.exe 800 NexomiaUI_v6.93.205.exe 800 NexomiaUI_v6.93.205.exe 800 NexomiaUI_v6.93.205.exe