General
- Target NXOLoader.exe
- Size 13.2MB
- Sample261012-3tw8dafe64
- SHA256 10f54a8a7eb662a8cf586313466008323b976b0d06c9a0f5742c2b4485a40d2e
- MD5 fff1a34942b0c006d0b74f5844585365
- SHA1 471dea56cb9bb1021720c19ef042f111156373eb
- SHA512 94a032717e1e938270179863d660194c568b82d40a69a9fb4bb41cceaf43aa51fadc4a7c85fac222cddbdeccd116f849b2a0557e872897a0d3f8993a58bbfd91
- SSDEEP 393216:VE1ZZI7Anr6cegMFsmvQ4FSb2FPsWAa0xg:O1YsUgMFsmYn2Vd0xg
- TLSH T106D623EBA0C552E4D4D34BA0724ED7FD32B0701A4A696C2C36E72C425E32D674E4DEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NXOLoader.exe
Resource
win10v2004-20260911-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
NXOLoader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target NXOLoader.exe
- Size 13.2MB
- SHA256 10f54a8a7eb662a8cf586313466008323b976b0d06c9a0f5742c2b4485a40d2e
- MD5 fff1a34942b0c006d0b74f5844585365
- SHA1 471dea56cb9bb1021720c19ef042f111156373eb
- SHA512 94a032717e1e938270179863d660194c568b82d40a69a9fb4bb41cceaf43aa51fadc4a7c85fac222cddbdeccd116f849b2a0557e872897a0d3f8993a58bbfd91
- SSDEEP 393216:VE1ZZI7Anr6cegMFsmvQ4FSb2FPsWAa0xg:O1YsUgMFsmYn2Vd0xg
- TLSH T106D623EBA0C552E4D4D34BA0724ED7FD32B0701A4A696C2C36E72C425E32D674E4DEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger