Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/08/2026, 16:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nex (2).exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nex (2).exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Nex (2).exe
- Size 2.6MB
- Sample260827-vb8jpaycjb
- SHA256 bfbdb93fe55d16d684180b4b84db94f27ca32e40278bd5a31a55e08b2bb0f7e1
- MD5 ad5dbcdefbee985d3cc952b43e5c9714
- SHA1 1a33c7cc3522d068f75e4a4ad1eb6e862241b95d
- SHA512 7bbde777a3af7c17a872855fa9309503a883802ed9f2a648aa469157f4222609b3e67899f5e48ec628f95c0fa94caa8dc99f4d0db2dd7b74114e778fe93a48a1
- SSDEEP 49152:S0JGzIVCors/x2iC62ccqKDaW0wycnnhxK5yCWG46ph0Ads9GfO7:rJgIVCors/x2iC1wrWGLh0Ads9OO
- TLSH T161C5AE1293A246BCD16AD676C59AF913EB75740C03E2A5CF27D049D13FA62F08B7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion Nex (2).exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4136 Nex (2).exe 4136 Nex (2).exe