General
- Target Nexomia.exe
- Size 19.2MB
- Sample260901-3r2ebacr4v
- SHA256 df22f13ef356626f3498b8974d29baae93f457662ef09ff1d3935ce9a1744379
- MD5 ddedd37ac3e65c546c4ce480a7f007c0
- SHA1 24a0aafae28c7576c0480642181706495e91b6cb
- SHA512 a12575d1dd3053105d9ceb1877c5523f4c8b16a309fc4a2af82f4a6af27d572995f30ffe20d6fcbab8572fe84aecf2c10159fe99bb62af81d24358aba8103e39
- SSDEEP 196608:1bbxXWLTPRpl9nJpLadHVb9U5StSzKjB+zdY4HciDopWizF0d7HYKY6gDK7lDJNq:1sXvLad1ygSzkMzCkYpWAF0djYKQKRo
- TLSH T180179D42F66280E8D16AC175835A6233FB31BC5947357AEB5BE04A213F6AFD0673DB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nexomia.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nexomia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Nexomia.exe
- Size 19.2MB
- SHA256 df22f13ef356626f3498b8974d29baae93f457662ef09ff1d3935ce9a1744379
- MD5 ddedd37ac3e65c546c4ce480a7f007c0
- SHA1 24a0aafae28c7576c0480642181706495e91b6cb
- SHA512 a12575d1dd3053105d9ceb1877c5523f4c8b16a309fc4a2af82f4a6af27d572995f30ffe20d6fcbab8572fe84aecf2c10159fe99bb62af81d24358aba8103e39
- SSDEEP 196608:1bbxXWLTPRpl9nJpLadHVb9U5StSzKjB+zdY4HciDopWizF0d7HYKY6gDK7lDJNq:1sXvLad1ygSzkMzCkYpWAF0djYKQKRo
- TLSH T180179D42F66280E8D16AC175835A6233FB31BC5947357AEB5BE04A213F6AFD0673DB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger