Analysis
- max time kernel
149s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 17:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NebulaInjector(1).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NebulaInjector(1).exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target NebulaInjector(1).exe
- Size 357KB
- Sample261029-vrteps1z2m
- SHA256 b23130fb567c71468b37eced9bce90e03b8b1b6a171641e61d223ca1048576f9
- MD5 0cf05a6143e9e4b66b1b666aba671dee
- SHA1 2820bf8074967afd35fd419393a33126ee2520a5
- SHA512 b538f02b2193a9930930ba6dab89c655843ed7f3d05c6c729e019d696928f6f87efcba40d25ec6462dd8ab4e5d35bf7decccae5b01c0189183bbe1e7e3bef6ba
- SSDEEP 6144:7FmL8FwvgfDW2up5vbNnqlkMLRq+Mh7rrbjewcGcoGMaeZIBQCQ:BvwvgfDW2c/9M9JyvnDcGcoBdZIV
- TLSH T1C0748D15EBD405FAE177C578CE678942EBB27C8A07B0AACB139049A61F276D04F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname NebulaInjector(1).exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain NebulaInjector(1).exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe 5060 NebulaInjector(1).exe