General
- Target Nuvio-Windows-x64-0.1.30-alpha.msi
- Size 180.3MB
- Sample261014-282kzaae35
- SHA256 9d3aa82557ae2f02d2e5fc97a91dff42630b971536cb527a7618f503356bf0e3
- MD5 9dbf956c339145c7ff5a38d2a87d656d
- SHA1 5117a82b04a54e8e6a3c424d1dcd520a92c2bc3f
- SHA512 61cf701903e28e3e66032a31919a5c1fb6f0fefe29287df9db40bff37c727c94135b74ad82d8b1ec242f4e712627329da78c153dfef13227d936e3ba2fee9a3c
- SSDEEP 3145728:0GuOOxoONAc5ZOHN8/iBKNsLKSNJtc1z2zqqkQG3zVS41MV7ADK65J2ht5H6SYs:0x9ZNp0SoKNWKSHNkQKzVSBM75kSs
- TLSH T1E6983353FE3944A4E571FE788175972981207C520121CB72F3A0AAA6EFF35D01E76BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nuvio-Windows-x64-0.1.30-alpha.msi
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nuvio-Windows-x64-0.1.30-alpha.msi
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Nuvio-Windows-x64-0.1.30-alpha.msi
- Size 180.3MB
- SHA256 9d3aa82557ae2f02d2e5fc97a91dff42630b971536cb527a7618f503356bf0e3
- MD5 9dbf956c339145c7ff5a38d2a87d656d
- SHA1 5117a82b04a54e8e6a3c424d1dcd520a92c2bc3f
- SHA512 61cf701903e28e3e66032a31919a5c1fb6f0fefe29287df9db40bff37c727c94135b74ad82d8b1ec242f4e712627329da78c153dfef13227d936e3ba2fee9a3c
- SSDEEP 3145728:0GuOOxoONAc5ZOHN8/iBKNsLKSNJtc1z2zqqkQG3zVS41MV7ADK65J2ht5H6SYs:0x9ZNp0SoKNWKSHNkQKzVSBM75kSs
- TLSH T1E6983353FE3944A4E571FE788175972981207C520121CB72F3A0AAA6EFF35D01E76BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.