General
- Target Nullify.exe
- Size 209KB
- Sample260906-yezmqsda34
- SHA256 fd8de97763216bdcd4f905f8450f76cba8a2fced4faa20b8a0677d20310de834
- MD5 6af7a3d7fd24e97d003d9ef8783e0d3b
- SHA1 fa606423ff4c24d64b3300cf8a50aa361fd34bf3
- SHA512 a2b3bf7176d6083741614a36ddcd4a27ce13d3ea0a7a16bca647602fb147715eca3a32cb78af983739711f473b0ecaa2af22f50cf42f6b8af25c81dc49f00f7d
- SSDEEP 3072:kBr2xisxa0bOrds034tSkiUrie4GzPDbzRhwOQMvzaT4okGMkThp+ya:kBr2xJRbOrac3kl3zBQVtkGMmr+y
- TLSH T197242A5A32D800FCE077E1B8DE93A603F2B27845033551EF1BD196790F66AE5B97AE01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nullify.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nullify.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Nullify.exe
- Size 209KB
- SHA256 fd8de97763216bdcd4f905f8450f76cba8a2fced4faa20b8a0677d20310de834
- MD5 6af7a3d7fd24e97d003d9ef8783e0d3b
- SHA1 fa606423ff4c24d64b3300cf8a50aa361fd34bf3
- SHA512 a2b3bf7176d6083741614a36ddcd4a27ce13d3ea0a7a16bca647602fb147715eca3a32cb78af983739711f473b0ecaa2af22f50cf42f6b8af25c81dc49f00f7d
- SSDEEP 3072:kBr2xisxa0bOrds034tSkiUrie4GzPDbzRhwOQMvzaT4okGMkThp+ya:kBr2xJRbOrac3kl3zBQVtkGMmr+y
- TLSH T197242A5A32D800FCE077E1B8DE93A603F2B27845033551EF1BD196790F66AE5B97AE01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.