Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 22:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexusTweaks.rar
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
NexusTweaks.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
NexusTweaks.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
NexusTweaks.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
General
- Target NexusTweaks.rar
- Size 1.7MB
- Sample260820-2edbaaga99
- SHA256 605f225afb0165f4047567eb4dd65d39479d89f10f0046258155cb02862dc77b
- MD5 4ffb6720e74109721447f97b4b1cad40
- SHA1 c0c1e5c5efd7ca22f1e06c82bfa694fb229b24db
- SHA512 a86ef2dde0a0463ba219b17c6001c573ffd30ca4f34eb97bcc7cf5359fb532eb6671cd99197dbde8a8ce9706905d10b94d7830a849f770cfb2c3f46820b5afe4
- SSDEEP 24576:1dosfcyyiYm/3YFQy407LjPrUBtK66PVBVARNj1xDoA+bCOFAQruZAhN6vpi0PXv:1z0ylYYupBz2KBBVcEANQK2Si0PV79L
- TLSH T1CA8533EC8B0C2379B2D997DC51ADC4711F750099BAD2EE9DABC1F29DA004E6D7CE0162
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5304 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5304 7zFM.exe Token: 35 5304 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5304 7zFM.exe