Resubmissions

06-08-2024 23:46

240806-3sbv2sxhpg 7

General

  • Target

    NYX 4.5.zip

  • Size

    9.0MB

  • MD5

    52d5ebef8b441b82f87dcf928a382336

  • SHA1

    e9bb0a4fdd23e5345b8d9eacd50f6eb2568f9271

  • SHA256

    ca09bc895dc8a2d064c9627c83fb66de8224e85ef4988e04ea2416905c27d218

  • SHA512

    978a08f42cfe71fec7cf314ea9e3f2cb10975fd040a3ed6442f4bb2ed44b0008048e1f7805e475b167c770d4ca3a1d0849442ba799749c77711a4f165189b90e

  • SSDEEP

    196608:OFxkop4qGw8P3LGFqZSGrB51S5L/D6ayPiB8zPw4b:Tf7GEU4SD6LP3wq

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • NYX 4.5.zip
    .zip
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Nyx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • autoexec/dark dex.txt
    .js
  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    14248874c6f626cc676f0d1638a85bc6


    Headers

    Imports

    Exports

    Sections

  • monaco/Monaco.html
    .js
  • monaco/NYXscriptdoc.html
  • monaco/vs/base/worker/workerMain.js
    .js
  • monaco/vs/basic-languages/lua/lua.js
  • monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • monaco/vs/editor/editor.main.css
  • monaco/vs/editor/editor.main.js
    .js
  • monaco/vs/editor/editor.main.nls.de.js
  • monaco/vs/editor/editor.main.nls.es.js
  • monaco/vs/editor/editor.main.nls.fr.js
  • monaco/vs/editor/editor.main.nls.it.js
  • monaco/vs/editor/editor.main.nls.ja.js
  • monaco/vs/editor/editor.main.nls.js
  • monaco/vs/editor/editor.main.nls.ko.js
  • monaco/vs/editor/editor.main.nls.ru.js
  • monaco/vs/editor/editor.main.nls.zh-cn.js
  • monaco/vs/editor/editor.main.nls.zh-tw.js
  • monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • monaco/vs/loader.js
    .js
  • nyxplayerbeta.exe
    .exe windows:6 windows x64 arch:x64

    a89bdbb5ed415ad3d3ec6aed111c65bb


    Headers

    Imports

    Exports

    Sections

  • scripts/Infinite yield.lua
    .js
  • scripts/autosaved.lua
  • scripts/betascript.lua
  • scripts/dark dex.txt
    .js
  • workspace/.tests/appendfile.txt
  • workspace/.tests/delfile.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile.txt
  • workspace/4483381587.rbxlx
  • workspace/4483381587.txt
  • workspace/5972698540.rbxlx
  • workspace/6af56c1753ac6679dee3acbd1fd952e5-cache.lua
    .js
  • workspace/IY_FE.iy
  • workspace/IY_FEiy
  • workspace/autoParryByFFJ.json
  • workspace/print.lua
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections