Analysis

  • user interaction
    yes
  • max time kernel
    59s
  • max time network
    41s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 17:25

General

  • Target
    NexusCode.exe
  • Size 13.5MB
  • Sample261002-vzshdatv2j
  • SHA256 291352cc13334cf825d8c089bec92e393626adcbcb07f0d1ba36f6c7964df834
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 15 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NexusCode.exe
    "C:\Users\Admin\AppData\Local\Temp\NexusCode.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4904
    • C:\Users\Admin\AppData\Local\Temp\NexusCode.exe
      "C:\Users\Admin\AppData\Local\Temp\NexusCode.exe"
      2⤵
      • Loads dropped DLL
      PID:3552

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_bz2.pyd
        • Size 85KB
        • SHA256 b02f580daa0b390b2228d2a8186ef119be658c89cc64d0bd909550786ed993f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_decimal.pyd
        • Size 283KB
        • SHA256 196c42414c16e804874988783b8a356bf1d012d32e99efbc6e360e94920c46ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_hashlib.pyd
        • Size 67KB
        • SHA256 5dee7b9fff3e6d0abe20601b9e62f3a14cd048167ee0b80781131dc81dec9469
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_lzma.pyd
        • Size 157KB
        • SHA256 9099ef451fe61d8feef9e02894902b88fdc8ee404e3f8b7412b150878c973803
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_socket.pyd
        • Size 85KB
        • SHA256 18a77c4e1f4a71ca60b9dbbba809e98cd324f3e1470d091689b87754a8c65588
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _sqlite3.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_sqlite3.pyd
        • Size 130KB
        • SHA256 e69caeadb409777bce26f78622653558bbb86f08479b412399eaa0e6fd1e44f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_ssl.pyd
        • Size 187KB
        • SHA256 49df86fe76ed8fd97bb11a485286b49f5f5ebe953383648976a39c9de6f0524d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_tkinter.pyd
        • Size 69KB
        • SHA256 36675f9038cc1f1fea08b68ef38c5da94b41efbcd3a421421198f49f01afd8d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _zstd.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\_zstd.pyd
        • Size 491KB
        • SHA256 526d977236cc63895902977f216bf3ca93a4233489240656b295eafb6f518d07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-console-l1-1-0.dll
        • Size 15KB
        • SHA256 5612e5ae973cf1be139c3ad817566c8bb12925ff3d61055415793e7f4461b574
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-datetime-l1-1-0.dll
        • Size 14KB
        • SHA256 2497d114015b96e5a267602268c0186a855201371f8036781660afce82c75bb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-debug-l1-1-0.dll
        • Size 14KB
        • SHA256 a682a23c0a5d3930ce013d016289e3770120974d771870628a49d9fd67e72163
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 14KB
        • SHA256 92b713d5811440d85fd87edb7302c2213ebb848b63620f31b79d314edff79213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-file-l1-1-0.dll
        • Size 18KB
        • SHA256 9a263201260a4012a3b505d4ce2f478ae863ddbd7c28c57d8e72e3670258e4cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-file-l1-2-0.dll
        • Size 14KB
        • SHA256 96451727d2879367f1e6970916d37b10a61f9b8c975545cf262d1e1c11c888f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-file-l2-1-0.dll
        • Size 14KB
        • SHA256 1e5eaaa4aa738db5bf7a833c28c344a516714c09eb33d976e5cb5597ab9227a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-handle-l1-1-0.dll
        • Size 14KB
        • SHA256 938d10232eb3cd2a6a20cec26e3617ef12919f315762c65285c62ae685d81833
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 02257271282449cfa3862868243ae28227db5852c5ebf9d24b54b981dbc4c04b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 14KB
        • SHA256 c91df4aa68b9208a66ab98cfe1e30b938f1d4ce652e17623cd2f394129e834b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 15KB
        • SHA256 b2f89ee6a239013b96bd4ab726a9263df3177696fb2236f3b6a951496aaee06d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-localization-l1-2-0.dll
        • Size 17KB
        • SHA256 7cb1f200a3627804d265f9f9bce1c01302864b3a1d5a5f0fb9728376422485dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-memory-l1-1-0.dll
        • Size 15KB
        • SHA256 34560e8a0c303dc08ea862407044762f1e1b3621cf96aa2cf87b685d7c64f217
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 14KB
        • SHA256 f44e5479579a341be1306fd985957db6d8d23e7a5bff738fb9f654ee6a7627ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 15KB
        • SHA256 7d5fb578ae66bd3c2bfc06c50d53c9a02fa35d360cbce3ec65b0c45fea11d05e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 16KB
        • SHA256 ce1121f50644ece61bdcd0fae7f42f9b8eca3665dfc51c8471ecf346a2a9f37a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 15KB
        • SHA256 7527157df7f8aec61b858ea7e9955d9bea077d48ab634062dccb9ecf40c2ab43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-profile-l1-1-0.dll
        • Size 14KB
        • SHA256 b38a8254887ff8eecc801afe4b4091453dcd5de8713b4e738ce4f9dc5b101c7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 15KB
        • SHA256 e6ce4df629d451109fb070bedfabe652b7c305c20b4fd670204bec5bd6f45a30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-string-l1-1-0.dll
        • Size 14KB
        • SHA256 3c87d2737356bb4060241c81c5ef94808002d6d902898de86dfc3ab07cf6c27e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-synch-l1-1-0.dll
        • Size 16KB
        • SHA256 6722faca625a03af84c4ee59b4649ef7973d1e1c8e35426d0516faacab691d64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-synch-l1-2-0.dll
        • Size 15KB
        • SHA256 f2daeba9f45595cf81b4da10a063e152361fe83df138d08e13b62babd884918e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 15KB
        • SHA256 270705a1259520e4d2c48cca795bfd746f8e0e54918e5dd3469776c5a5c37922
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-timezone-l1-1-0.dll
        • Size 14KB
        • SHA256 4f1d448a899c2ce721e5ab87a8a8d0531ea5030588fe227b184da97b11bbb313
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-core-util-l1-1-0.dll
        • Size 14KB
        • SHA256 84f3d14253360f8d7e2d82889623e3c6abea9be1112f1260068095b4bb4d8a23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-conio-l1-1-0.dll
        • Size 15KB
        • SHA256 13391043dd0802a49130821b0543c2e880d329d9490e886d3b3ee32b7faa4252
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-convert-l1-1-0.dll
        • Size 18KB
        • SHA256 a4ec625f53cbff50e5c68057eea38fe64b5d0b1c9080df8c01ea1f1a9bbebb82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-environment-l1-1-0.dll
        • Size 15KB
        • SHA256 0f87c8db7ee165b2952e3eb6da7000db93bce01d7c68b9106e99d12139a3ccc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 16KB
        • SHA256 acbd858a5a9d83cc165f6bf65fd08c905746e388b9b024f9932e7ad62c7206c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 5239d34bca3da5ccde458de2d1892da71db916127938db246989367e2d496aa8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-locale-l1-1-0.dll
        • Size 15KB
        • SHA256 297fde000d7531ac09eb1535d0b830a4dc10beaa5619a043ea134ee2370c6cbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 680adf27399a87dd869815de0d96c8d9983af2db23090b909e4613bbd01f1e8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-private-l1-1-0.dll
        • Size 66KB
        • SHA256 6d638ec054072099bd270b9a5134a63a94d09f4de273d0e6810259084bff075e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-process-l1-1-0.dll
        • Size 15KB
        • SHA256 78b5277415069563dc708eaeb3971ce9a1565057028744526d16c1270bc0ae6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 19KB
        • SHA256 db6474239eff2444512b7ca0eb4e2f35ff0500a8f414fff68d9b4f2054f07508
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 20KB
        • SHA256 30829da3596b3936f63b491c1a5ead8958c15aba223774c562863c336b2f133a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-string-l1-1-0.dll
        • Size 20KB
        • SHA256 dede1c3e04d7cb98fc3684bea45a4e9028d04dde0bdbf8bc6ec45e6613e3aee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-time-l1-1-0.dll
        • Size 17KB
        • SHA256 fd2b85354a7012b546e2f1b821504bf0138814f3c6023a7e4d73297c5e6bc5fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\api-ms-win-crt-utility-l1-1-0.dll
        • Size 15KB
        • SHA256 ded8afbb9785e69915a35d2ad531d5e12c6973fcb4d11254e57805b2e1218b23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\base_library.zip
        • Size 1.3MB
        • SHA256 b36322349f734efbc6171efe672e1f035cd45522f8e8033c86596d14781c7cb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\libcrypto-3.dll
        • Size 5.7MB
        • SHA256 75495fe0e079ab00d49be740d3c710a0b94e3f74f9648cb7cc9f768fc7f52319
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\libssl-3.dll
        • Size 1.2MB
        • SHA256 8957182a9c385bfd9f3f790921de2ddc614cf91f99edbed4e9e5446a46504e32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libtommath.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\libtommath.dll
        • Size 93KB
        • SHA256 aaea8a20db7a7a96d4bef74ad724c4a02595a9c47659f6cbd6f145af0c97aa78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\python314.dll
        • Size 6.5MB
        • SHA256 854fe7549eb4b2ac478935a38ae2ca1b774c6fdc3d87f0263fbd697ff86d7149
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\select.pyd
        • Size 32KB
        • SHA256 a341519a00befc3b86dfddf5938915fed52ded1ad5aab518c57d0b3c8969e835
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\sqlite3.dll
        • Size 1.5MB
        • SHA256 5c47df970d2e8cc41239754ff167056fcecb1089f876736e51dab5d89f980300
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl90.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\tcl90.dll
        • Size 3.2MB
        • SHA256 4ea18c5f4f977b827c5d6e3894328105a4c2838d3f3f927b33f96578daa15271
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl9tk90.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\tcl9tk90.dll
        • Size 2.1MB
        • SHA256 6a480fc83fba6e6a5ccc5979ba00313a1ac1d2a987cc764c4f5982895b18b00c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\ucrtbase.dll
        • Size 964KB
        • SHA256 9f2ed1c609d6d5c4c5c1eab4da56da240bceb348ae98cdacf985dabf84376e1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\unicodedata.pyd
        • Size 740KB
        • SHA256 0527fee5192ab4567451d1296533600661571f6ebf9e8f4e0f60b63a4a4fd2e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000013282\zlib1.dll
        • Size 114KB
        • SHA256 241c35ccfd3b9fba5ea5ce9c9a3d6f532df10cc7236c985a1570a01c3cb714bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _current.txt

        • Path C:\Users\Admin\AppData\Local\Temp\configs\utebyamamashluha\_current.txt
        • Size 7B
        • SHA256 37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f
        • MD5 SHA1 SHA512