General
- Target Nex.exe
- Size 37.5MB
- Sample260822-znakmsgd55
- SHA256 e94940bdae8b1554a906a782ea65fc524b48e30b8fb0214d8455a8ecb5afecaa
- MD5 c32c875bb07374613bcf00983cc8c30f
- SHA1 8fa8f13c59dea1789a57ec6fd3895a3fbc96c842
- SHA512 1e28f70379a51c00549c22b425f7945cb79b42772a71c7cff61d37e599372377da9ff3d8993f33b4421263e0ead2ed1fc3518767d8cf7a8a9f378d8b59f56db2
- SSDEEP 786432:Eznxv2JLWgVodmUJAD1YnXahpHJXduJT+KrLXt5maPkrHEFSvCuhwm:indOKJAD1OXahkNvPOEFBuhw
- TLSH T1088733D693F0046ADD5A8037AABAC1E2D321B4165330C9EF0ECD973A19BF2E65D39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Nex.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nex.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Nex.exe
- Size 37.5MB
- SHA256 e94940bdae8b1554a906a782ea65fc524b48e30b8fb0214d8455a8ecb5afecaa
- MD5 c32c875bb07374613bcf00983cc8c30f
- SHA1 8fa8f13c59dea1789a57ec6fd3895a3fbc96c842
- SHA512 1e28f70379a51c00549c22b425f7945cb79b42772a71c7cff61d37e599372377da9ff3d8993f33b4421263e0ead2ed1fc3518767d8cf7a8a9f378d8b59f56db2
- SSDEEP 786432:Eznxv2JLWgVodmUJAD1YnXahpHJXduJT+KrLXt5maPkrHEFSvCuhwm:indOKJAD1OXahkNvPOEFBuhw
- TLSH T1088733D693F0046ADD5A8037AABAC1E2D321B4165330C9EF0ECD973A19BF2E65D39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.