General
- Target Nexomia.exe
- Size 20.2MB
- Sample260930-vrg2nstfjf
- SHA256 3167001ac4831ab3fe384813de7c8eb3653fbfc56ff7e42bf328975298da56c8
- MD5 316b0bc9ed486b9bb3ea171a9eb24048
- SHA1 21ed5187cf11819f423cb74de658abd8ec0e0ffc
- SHA512 d7ba2e01a4d706cb371ccf4e93c561365aaf54d6112898137eba8d70fa64d67588187bee31dc7669da7420ed59cdee8349f0868cdf2ef03c5882e8c054789417
- SSDEEP 393216:j1gXU85gKDERCJgn6sDfNTS8HZ6dLZNP5MI:eXYKiUgZTSu8dNv
- TLSH T1E9279D03F26290E8C56AC175875A6233FA71BC4947347AEB0BE48B253F66FA0673D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nexomia.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nexomia.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Nexomia.exe
- Size 20.2MB
- SHA256 3167001ac4831ab3fe384813de7c8eb3653fbfc56ff7e42bf328975298da56c8
- MD5 316b0bc9ed486b9bb3ea171a9eb24048
- SHA1 21ed5187cf11819f423cb74de658abd8ec0e0ffc
- SHA512 d7ba2e01a4d706cb371ccf4e93c561365aaf54d6112898137eba8d70fa64d67588187bee31dc7669da7420ed59cdee8349f0868cdf2ef03c5882e8c054789417
- SSDEEP 393216:j1gXU85gKDERCJgn6sDfNTS8HZ6dLZNP5MI:eXYKiUgZTSu8dNv
- TLSH T1E9279D03F26290E8C56AC175875A6233FA71BC4947347AEB0BE48B253F66FA0673D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger