General
- Target NexoExperience.exe
- Size 1.3MB
- Sample260910-rbaqwavarg
- SHA256 299a080b788c3f9d1240fcfa2791cf85d9b3165665e35b7335a493a04ac5e3d1
- MD5 b099b39d97c31e1fbb4f3630bd854bfb
- SHA1 2d68c862c466442cd8bafc6cc59c9125bed5b11d
- SHA512 6239b5f0167ec18b4a8169a30b094cc91d6b4839dbd479d66717d0b0b136f09e5fd2c379c062abee52633a86d55da7aaf40aa836ac48a16ef5e2dec7c1233bd4
- SSDEEP 6144:Q0RVwKAjM+UuOvoDp/HhYWYL5Ipvx1CkiK9Iw0VB/inS4uHTeVIrwSfAPL:7Ry1M+UbgZg9wOB/inStz8IC
- TLSH T1F655A657EA7655D1C07FC03C9642EA1EF86434AA8375A3EFA6D14E812B437E4AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexoExperience.exe
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
NexoExperience.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target NexoExperience.exe
- Size 1.3MB
- SHA256 299a080b788c3f9d1240fcfa2791cf85d9b3165665e35b7335a493a04ac5e3d1
- MD5 b099b39d97c31e1fbb4f3630bd854bfb
- SHA1 2d68c862c466442cd8bafc6cc59c9125bed5b11d
- SHA512 6239b5f0167ec18b4a8169a30b094cc91d6b4839dbd479d66717d0b0b136f09e5fd2c379c062abee52633a86d55da7aaf40aa836ac48a16ef5e2dec7c1233bd4
- SSDEEP 6144:Q0RVwKAjM+UuOvoDp/HhYWYL5Ipvx1CkiK9Iw0VB/inS4uHTeVIrwSfAPL:7Ry1M+UbgZg9wOB/inStz8IC
- TLSH T1F655A657EA7655D1C07FC03C9642EA1EF86434AA8375A3EFA6D14E812B437E4AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.