Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
899s - max time network
440s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/09/2026, 21:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NESTROT-4080-V3.exe
Resource
win11-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
NESTROT-4080-V3.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
General
- Target NESTROT-4080-V3.exe
- Size 72KB
- Sample260906-1gpawsdd56
- SHA256 51da94c238f8e5ee9399ece87cac3decd0792a931daf9d4e02666f2ccd0113b6
- MD5 3b8c47a2fc20f996aed0ac3b9d3c481f
- SHA1 498264e186b91479ad3e8956710a1b6b6d84500f
- SHA512 cf4d51bca1997e1157f544ad63f1dd7219ed4f8d3fbaa635e6ba42f8f8c7e483a58a617c807fbbd5c913fcd68c05df6808a95428b861ab65da02ffb5588039ce
- SSDEEP 1536:rsAR7PgKK7xVONTXFyIAd8s2pn41QLAetK+rw:r2ljO5XFMapnEQbtK+r
- TLSH T13873D60ED7BB81ECC85DC07981666A62EB30FD49473277EF47A19B212D50BE15E38782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\NESTROT-4080-V3.exe"C:\Users\Admin\AppData\Local\Temp\NESTROT-4080-V3.exe"1⤵PID:2356
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1352
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5400