General

  • Target
    https://cdn.discordapp.com/attachments/1522665947645612192/1550912187256676432/Nexomia.exe?ex=6ab00f07&is=6aaebd87&hm=6004f17e1010686908e0f2ce29fe5798dd009c2d9f1083ad697d4372d69c3691&
  • Sample260919-vnwewshe78

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1522665947645612192/1550912187256676432/Nexomia.exe?ex=6ab00f07&is=6aaebd87&hm=6004f17e1010686908e0f2ce29fe5798dd009c2d9f1083ad697d4372d69c3691&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks