General
- Target Nexomia.exe
- Size 19.1MB
- Sample260825-xlpknsdn91
- SHA256 f1227deb4a7265eae9630967dea840db4343a511be0734adc188b35f8cd93ea9
- MD5 b3e443ad8a4d15da9e8cc14ad5defc2b
- SHA1 c5217abd3504ccc19d7f68eb273a57f008736457
- SHA512 212eb48b046779123051c0868789a8aedf50bab72514396bbd9e57c31fead3a9aeb953187dc726b32684343cf15d23e9b2e2837acc454b1c85902eff547c2b8b
- SSDEEP 393216:oS6L0yOonbaoMCd9BzsYBDZgLGMKNzCkE4N:ofL0zloMCd9tsYBlxB15
- TLSH T187179D42F66280E8D16AC075835A6633FB31BC5947357AEB5BE04A213F6AFD0673DB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nexomia.exe
Resource
win10v2004-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral2
Sample
Nexomia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target Nexomia.exe
- Size 19.1MB
- SHA256 f1227deb4a7265eae9630967dea840db4343a511be0734adc188b35f8cd93ea9
- MD5 b3e443ad8a4d15da9e8cc14ad5defc2b
- SHA1 c5217abd3504ccc19d7f68eb273a57f008736457
- SHA512 212eb48b046779123051c0868789a8aedf50bab72514396bbd9e57c31fead3a9aeb953187dc726b32684343cf15d23e9b2e2837acc454b1c85902eff547c2b8b
- SSDEEP 393216:oS6L0yOonbaoMCd9BzsYBDZgLGMKNzCkE4N:ofL0zloMCd9tsYBlxB15
- TLSH T187179D42F66280E8D16AC075835A6633FB31BC5947357AEB5BE04A213F6AFD0673DB04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger