Analysis
- user interaction
yes - max time kernel
30s - max time network
30s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/08/2026, 20:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nonagon CS2/Nonagon.exe
Resource
win10v2004-20260513-en
0 signatures
30 seconds
Behavioral task
behavioral2
Sample
Nonagon CS2/Nonagon.exe
Resource
win11ltsc2024-20260709-en
0 signatures
30 seconds
General
- Target Nonagon CS2/Nonagon.exe
- Size 8.8MB
- Sample260828-yz2mtsshle
- SHA256 073359e8fb7afa1955fdceb6f8992286272c9c9095bd01212096d5520aebdf57
- MD5 785dbbfd0d3a0a7403eb1128ad697d67
- SHA1 6da4b3ff8920a230ec6af13f585548ad634b40a7
- SHA512 1f1d3785d1fba51673d8d74f48c4378140b0260d1eadaf02fa1abc7cc8f3a7448bae3da70e5ba833a5dadaabd96854b94acf61bb207b94e1bf2f5b689b58928f
- SSDEEP 196608:CReWVcLOPN7+KD8aPpsg/R34ShUh7ELg47rFyuyMtwgL85P8Ce92lBtQnEkcXPQG:pWVPNChaBsg/RIz7ELT7rLhth45ECe9J
- TLSH T187963342F3AC17F1D42A8234CE87761BEF763849175016DF23D404AC2BA67F55BBA622
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nonagon CS2\Nonagon.exe"C:\Users\Admin\AppData\Local\Temp\Nonagon CS2\Nonagon.exe"1⤵PID:3396
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2788