Overview
overview
8Static
static
3NXYEdge.exe
windows10-2004-x64
8$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/certmgr.exe
windows10-2004-x64
1NXYEdgeInput.exe
windows10-2004-x64
7NXYEdgeService.exe
windows10-2004-x64
5NXYPassGuardX.exe
windows10-2004-x64
1certmgr.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16/07/2024, 09:12
Static task
static1
Behavioral task
behavioral1
Sample
NXYEdge.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/killer.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$TEMP/certmgr.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
NXYEdgeInput.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
NXYEdgeService.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral10
Sample
NXYPassGuardX.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
certmgr.exe
Resource
win10v2004-20240704-en
General
-
Target
NXYEdgeService.exe
-
Size
355KB
-
MD5
e7a6b7c8398b00a009eef67844539e72
-
SHA1
9bf746c47b00df4ff4f4818010be0d6b16a7f5ad
-
SHA256
76679bedf2c5959c700796902deea745bf3b567466216fcfaf12d8692b5c85a2
-
SHA512
fd94a4f94051aa103db9077cf0c0a533811dd9f4c6046401a5bc4ffd93199f7cd6303237cb77dce0565ab35fdd2e78786b28e0aaad5b367db7750513b26a915b
-
SSDEEP
6144:0L7a/neL1hvT45VRsHo3LKZQkQsKHYq2tTZsFf5DkKnoGptdue2N4awed280:Y4eL3U53sHuOQkQsKHH1znBtdun2awey
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2576 NXYEdgeService.exe