92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a

Sharing

Copy URL Twitter E-mail

General

Target
Nitrox_1.7.1.0.zip
Size 7.8MB
Sample240208-1ctd2sbb4s
SHA256 92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a
MD5 f7d25be0395feec244bc865acfa07043
SHA1 b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d
SHA512 8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29
SSDEEP 196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Targets

- Target
  NitroxLauncher.exe
- Size 3.5MB
- SHA256 9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c
- MD5 e801cd1a9af46b219768d79f7d2a2b98
- SHA1 a2e939298aec1770b0079284b5bc275ba9cee517
- SHA512 48dee9078223881716bd1360881233b6a99df3c1f6063fe69784e77243ce55e988fea1365184de69b4f1724cd59ac02d6e8deaf7fbf00eae82301122c09e71ee
- SSDEEP 98304:fUqYeHg1UsnKLycqQYcDcwuavRfFujF0NpIl:LU18yArhvRfFujaNOl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  NitroxServer-Subnautica.exe
- Size 52KB
- SHA256 6a9c501b3f7442b5639171a3b3f62bfa37a02366b913e5bf2415b974f92ec15b
- MD5 77c090cdd1c3a3f5a8d3f24c6f3efb81
- SHA1 f8225d032a18c9d3a2935e164d8065c9203e70de
- SHA512 82548ef98c365d8e9029b9e67ea99f1745eac9d4697142c73757315068a2bd5a22314b0e76e64b587489b91d6425550a5135a5cc49a4b0a4cd531621dc5c114d
- SSDEEP 768:Cv1TH6xQt9tPSY/CBi8lKh5EPuVGePRM2p3QboZER04s4aCtRnC5b1BK3AK1xh4u:Cv1TH6xw6lZuFPJ6oZm0IrQ0Opri
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  lib/0Harmony.dll
- Size 186KB
- SHA256 fad4daa6385ce3be8d57311499183aa5227fca9d53deb6ea837cabcd7bea31bc
- MD5 d844903eeebc7aeb66f8f496c3f04fc8
- SHA1 2dcd60b56691454f1f25da75addd4cb2c7f08f95
- SHA512 e91e0a22cc330f0d5d6857667d6ae8f603e75d3d710b3fc580873a560220f8e50b188ca2c583cb04e80d67d828134bc768e747c816d9878da7e6d6a2aec36a2b
- SSDEEP 3072:Z4bJlQUaqpZuKOdHe0yjZ9S2j9RhuDVbuJQRZtzNw:XCOd6nS2BRhcuWT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  lib/AssetsTools.NET.dll
- Size 163KB
- SHA256 957551dd052ecff87320a202e4e1377e126723ce6065cbf39b246adf6b6b8eba
- MD5 e24e1db1dd753701b3975640f6ace7d8
- SHA1 f5ab566151f2ca173dddf3bcf3bc53ae91b592c5
- SHA512 216fd3faf1b0cfaa8050906771df3b94126f13174e0484d29ccf2fc190c23b6bfaa1e0b2b4ed6761036f318398d9329f058c1fcba2ec762755d6412c2ad11d67
- SSDEEP 3072:qyOzHbaVsP8amGsg+vVVu/ub58Onwv3F42UKCXK4Y3GWH:q3zHwxoub58xfFeKCbMd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  lib/Autofac.dll
- Size 226KB
- SHA256 4a0a258acdd8b8544f100255b36956465aab30fbd557c27d7c1479e2176da3a6
- MD5 996f8bb8d5988ec942f1a412120e6178
- SHA1 e14da72f084446519a078e7706c74165bb458dd0
- SHA512 7cf1856afe8f4b5eeed4de48aca12f2e73e7bf38027c6b7e67f507ac6926d53f8200ac754650329e00297c4b893619151c88f1a0d204c49737e5d6d0701a89de
- SSDEEP 3072:o36EQo/nAmrSwxl6g6o9We/Bwdc2lSG+qR/EWJS6A6g73yRhxgByGP/aw4cQSOhC:oBclGKpT6zbcZAhdPSVuoxnBDPTS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  lib/BinaryPack.dll
- Size 61KB
- SHA256 bb86d8edf03f0111c8f58a3ff03196aaf45b789e45e927ecec92fbf7627b3d9f
- MD5 6181dc681fedbb3d24225ee7f796298a
- SHA1 82758a1c0c695040f81098dea9dc2a722809da5e
- SHA512 8773b5e4d8b8de658f11abb2e40c6871b432823b8908d483b4a32e690eb9e6d197d9a6c09d6b73c36d862ffc423579ee75552da0a9701a0c44c358886e8ed2f3
- SSDEEP 768:gYUBEh9eHge0x+oRYsf7y85+iMsAU6eoubl7EUfCq9QsaROha0hnsO2XNodMsME7:gYU2XhxdDy85+iMsAU3Lcqj4G1ASHVH
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  lib/DiscordGameSDKWrapper.dll
- Size 96KB
- SHA256 c4e674b22d2264fbc3b1598da44cc142d38aa0c6ae53f97f639ba16e08b1d3f3
- MD5 6fb764a15fb45a61e75bdaf1ec2ccefd
- SHA1 ab0432e02a6bb39c2c5714fdbde5ae4045a851d7
- SHA512 221f8244f4ed7a19ed7f52261202d2c8930c072c96735a3d52f58a8457a00409057bb04a700d664c45aafc9072fa5040703a1520bf72e271e6f54c1b804b56cb
- SSDEEP 1536:Svko7joOfR2n8EvgKWkj9PfcNJYjJ3DykxsCBetaCMI6/5lwj2lKy7FIudp9txxt:S5noOfgn8wMYF3DykxsCBetaCMI6BlwG
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  lib/JetBrains.Annotations.dll
- Size 96KB
- SHA256 f5177e397a60a587ab92934a415a5803c7e005360f40042fcdfe3c55bb78abdb
- MD5 955a2555bec853489dd45dcf7fd10c1c
- SHA1 842aac70dc0079ec26e936aa1ccf5dd4e1ddbbc7
- SHA512 2387d8e341539281f27dde35c5f49b19e8078b17bbf4d1bb638f824524686e0e8237564e94c14a26a060f4ad5c8130c0e968a31418ca517653214c6016fa8b47
- SSDEEP 768:iRMOA2DVADfs32zAAkLuLc85/MNFvqaZKWjoPDP3hfPmQvjcwo+YtxgAUTdyKL0r:i82lVGe7xOvzxr+LlrLBvl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  lib/LZ4.dll
- Size 44KB
- SHA256 e4bed49f4aef35a4df8bd3090a74ae8ee1b1c299517247cbace062b64bc66c56
- MD5 3ba98ed918a22936c524daf1a8538ce3
- SHA1 758303b0ae09314963d13d2b6d077feb579001df
- SHA512 85ab5b561c9d5ec1a2651f6cf645cf2a5e27558b680c781e76f7cf7abde795a977b878ed5ff606c68bf6a8212eb499bf269155aef9b4de2ae4d1c3aede4de6ea
- SSDEEP 768:6cE0yWSGqN3LInEOkvhWfgwH/1iXt/DAMnxQv//9Yt/to7/ittxtxttxU+u1jCtp:6cE/WSGFnEOHgw9wtcWxQv//9Yt/tG/4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  lib/LitJSON.dll
- Size 60KB
- SHA256 b13efed121cc3a76c859d3241684881a9c5a6fab12a9a91e86fc5d108c8dc40b
- MD5 0618e6e6e60c78b3dfe4933d487102a0
- SHA1 01fb560ceaeb1e1f63f3334eb9562140abb595d8
- SHA512 6796e63c0d83ff2c68ecb2a90b1ffbb1707410831353ad0c31c592cc2bdd569122e16d786e0f048e4ee3efae9a90360742fa152c754e75dd233f848491efde1d
- SSDEEP 1536:/vDkRnsWMAwZ4mnC3PColWXm8+T35o+bmO15:/vDkRnsAwZ4mnuCL+TpQO15
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  lib/LiteNetLib.dll
- Size 92KB
- SHA256 99faaa90ebcc5f18e4ac7186d2f2cde4aecd0b9b9adb20a167e06d0336684880
- MD5 7a056177ff891b3f411c18d796a41580
- SHA1 5b5c966f3ebba9902a4f209ef8fab10e4885a153
- SHA512 c25374c5fec295f9148f3a0874895134e103e37ad3b5c9825c7ebcb5f7d0a6f41b867e9f69327196a1c80037288a711252a1f34c0d3f35194912e6455958d891
- SSDEEP 1536:n+35NIlMxaeG72O6Zj+1+ivwrkSjqpJ+q:+35NIWft+MiYnm2q
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  lib/Microsoft.Win32.Registry.dll
- Size 25KB
- SHA256 e9a9d281c1a708aaae366f82fd6a1742f65da2918cc4fa5eaaaada0be24277d9
- MD5 59c48aacb1c413c108161afe13fdbed9
- SHA1 31ace4b26d8a069c84aad6001e06c2a5483806f3
- SHA512 8252abe64c67863d9e4c70e820f0c69c517b8678a4b4c13a436118bc276e5f21e84522b93566c0bc009effcb251ed67bdbc60e4907abea2f33b6be3764e28d1d
- SSDEEP 384:j4nLpSumfSQrlHViaCZYvLPQmlJLfjnWn6GWfdHRN76+fVlGsa9h:j4QVrxViR9mlxd96lv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  lib/Microsoft.WindowsAPICodePack.Shell.dll
- Size 529KB
- SHA256 e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
- MD5 54fe9a2748c4a0f282d4ec91e3cadc16
- SHA1 970b783a697d893ecd4916dd86b5ff7574896c9e
- SHA512 c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f
- SSDEEP 6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  lib/Microsoft.WindowsAPICodePack.dll
- Size 102KB
- SHA256 418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0
- MD5 9531b41519156855a45c46f0b379a784
- SHA1 00b857f09dcf0c71dab40c1a8c4c54d411fdb197
- SHA512 10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0
- SSDEEP 3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  lib/Mono.Cecil.Mdb.dll
- Size 42KB
- SHA256 411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
- MD5 1c6aca0f1b1fa1661fc1e43c79334f7c
- SHA1 ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
- SHA512 1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
- SSDEEP 768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  lib/Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4
- MD5 6d5eb860c2be5dbeb470e7d3f3e7dda4
- SHA1 80c76660b87c52127b1a7da48e27700f75362041
- SHA512 64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5
- SSDEEP 1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32