General
- Target Nemesis Launcher (1).exe
- Size 41.2MB
- Sample260930-vejpqsseqg
- SHA256 9a44409b8e490d4dbabfeda4117891b9226850155d1b4729f09eb87b7e2644a0
- MD5 b4aba6fccd812d09509a4afb90d0185f
- SHA1 6f76ac73ce41fc2acac62b5d9b13307c6d5f6327
- SHA512 8415c5415ba8d777be53be4e99381f5c492785e0bc7d07c00a14ceabba71488ca60aaf50116b21c94dd1ae6121357df8908b04660cc5247d06208444110e5739
- SSDEEP 786432:RogzXJEqGLVvEeryXvhoggxDr2O4mAR+HEodBu1sTjmh:B5ET6wyXZoggxP23lR+oQjG
- TLSH T1769733E7E1099662E0E8D0F3AFFF74510131AC8E574DB634C2E81131EA1927B5AED356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nemesis Launcher (1).exe
Resource
win11-20260911-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target Nemesis Launcher (1).exe
- Size 41.2MB
- SHA256 9a44409b8e490d4dbabfeda4117891b9226850155d1b4729f09eb87b7e2644a0
- MD5 b4aba6fccd812d09509a4afb90d0185f
- SHA1 6f76ac73ce41fc2acac62b5d9b13307c6d5f6327
- SHA512 8415c5415ba8d777be53be4e99381f5c492785e0bc7d07c00a14ceabba71488ca60aaf50116b21c94dd1ae6121357df8908b04660cc5247d06208444110e5739
- SSDEEP 786432:RogzXJEqGLVvEeryXvhoggxDr2O4mAR+HEodBu1sTjmh:B5ET6wyXZoggxP23lR+oQjG
- TLSH T1769733E7E1099662E0E8D0F3AFFF74510131AC8E574DB634C2E81131EA1927B5AED356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger