Overview

overview

3

Static

static

3

NitroxLauncher.exe

windows7-x64

1

NitroxLauncher.exe

windows10-2004-x64

1

NitroxServ...ca.exe

windows7-x64

1

NitroxServ...ca.exe

windows10-2004-x64

1

lib/0Harmony.dll

windows7-x64

1

lib/0Harmony.dll

windows10-2004-x64

1

lib/Assets...ET.dll

windows7-x64

1

lib/Assets...ET.dll

windows10-2004-x64

1

lib/Autofac.dll

windows7-x64

1

lib/Autofac.dll

windows10-2004-x64

1

lib/BinaryPack.dll

windows7-x64

1

lib/BinaryPack.dll

windows10-2004-x64

1

lib/Discor...er.dll

windows7-x64

1

lib/Discor...er.dll

windows10-2004-x64

1

lib/JetBra...ns.dll

windows7-x64

1

lib/JetBra...ns.dll

windows10-2004-x64

1

lib/LZ4.dll

windows7-x64

1

lib/LZ4.dll

windows10-2004-x64

1

lib/LitJSON.dll

windows7-x64

1

lib/LitJSON.dll

windows10-2004-x64

1

lib/LiteNetLib.dll

windows7-x64

1

lib/LiteNetLib.dll

windows10-2004-x64

1

lib/Micros...ry.dll

windows7-x64

1

lib/Micros...ry.dll

windows10-2004-x64

1

lib/Micros...ll.dll

windows7-x64

1

lib/Micros...ll.dll

windows10-2004-x64

1

lib/Micros...ck.dll

windows7-x64

1

lib/Micros...ck.dll

windows10-2004-x64

1

lib/Mono.C...db.dll

windows7-x64

1

lib/Mono.C...db.dll

windows10-2004-x64

1

lib/Mono.C...db.dll

windows7-x64

1

lib/Mono.C...db.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nitrox_1.7.1.0.zip

  • Size

    7.8MB

  • Sample

    240806-nt9q5sxhrq

  • MD5

    f7d25be0395feec244bc865acfa07043

  • SHA1

    b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d

  • SHA256

    92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a

  • SHA512

    8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29

  • SSDEEP

    196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF

Score
3/10

Malware Config

Targets

    • Target

      NitroxLauncher.exe

    • Size

      3.5MB

    • MD5

      e801cd1a9af46b219768d79f7d2a2b98

    • SHA1

      a2e939298aec1770b0079284b5bc275ba9cee517

    • SHA256

      9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c

    • SHA512

      48dee9078223881716bd1360881233b6a99df3c1f6063fe69784e77243ce55e988fea1365184de69b4f1724cd59ac02d6e8deaf7fbf00eae82301122c09e71ee

    • SSDEEP

      98304:fUqYeHg1UsnKLycqQYcDcwuavRfFujF0NpIl:LU18yArhvRfFujaNOl

    Score
    1/10
    behavioral1behavioral2

    • Target

      NitroxServer-Subnautica.exe

    • Size

      52KB

    • MD5

      77c090cdd1c3a3f5a8d3f24c6f3efb81

    • SHA1

      f8225d032a18c9d3a2935e164d8065c9203e70de

    • SHA256

      6a9c501b3f7442b5639171a3b3f62bfa37a02366b913e5bf2415b974f92ec15b

    • SHA512

      82548ef98c365d8e9029b9e67ea99f1745eac9d4697142c73757315068a2bd5a22314b0e76e64b587489b91d6425550a5135a5cc49a4b0a4cd531621dc5c114d

    • SSDEEP

      768:Cv1TH6xQt9tPSY/CBi8lKh5EPuVGePRM2p3QboZER04s4aCtRnC5b1BK3AK1xh4u:Cv1TH6xw6lZuFPJ6oZm0IrQ0Opri

    Score
    1/10
    behavioral3behavioral4

    • Target

      lib/0Harmony.dll

    • Size

      186KB

    • MD5

      d844903eeebc7aeb66f8f496c3f04fc8

    • SHA1

      2dcd60b56691454f1f25da75addd4cb2c7f08f95

    • SHA256

      fad4daa6385ce3be8d57311499183aa5227fca9d53deb6ea837cabcd7bea31bc

    • SHA512

      e91e0a22cc330f0d5d6857667d6ae8f603e75d3d710b3fc580873a560220f8e50b188ca2c583cb04e80d67d828134bc768e747c816d9878da7e6d6a2aec36a2b

    • SSDEEP

      3072:Z4bJlQUaqpZuKOdHe0yjZ9S2j9RhuDVbuJQRZtzNw:XCOd6nS2BRhcuWT

    Score
    1/10
    behavioral5behavioral6

    • Target

      lib/AssetsTools.NET.dll

    • Size

      163KB

    • MD5

      e24e1db1dd753701b3975640f6ace7d8

    • SHA1

      f5ab566151f2ca173dddf3bcf3bc53ae91b592c5

    • SHA256

      957551dd052ecff87320a202e4e1377e126723ce6065cbf39b246adf6b6b8eba

    • SHA512

      216fd3faf1b0cfaa8050906771df3b94126f13174e0484d29ccf2fc190c23b6bfaa1e0b2b4ed6761036f318398d9329f058c1fcba2ec762755d6412c2ad11d67

    • SSDEEP

      3072:qyOzHbaVsP8amGsg+vVVu/ub58Onwv3F42UKCXK4Y3GWH:q3zHwxoub58xfFeKCbMd

    Score
    1/10
    behavioral7behavioral8

    • Target

      lib/Autofac.dll

    • Size

      226KB

    • MD5

      996f8bb8d5988ec942f1a412120e6178

    • SHA1

      e14da72f084446519a078e7706c74165bb458dd0

    • SHA256

      4a0a258acdd8b8544f100255b36956465aab30fbd557c27d7c1479e2176da3a6

    • SHA512

      7cf1856afe8f4b5eeed4de48aca12f2e73e7bf38027c6b7e67f507ac6926d53f8200ac754650329e00297c4b893619151c88f1a0d204c49737e5d6d0701a89de

    • SSDEEP

      3072:o36EQo/nAmrSwxl6g6o9We/Bwdc2lSG+qR/EWJS6A6g73yRhxgByGP/aw4cQSOhC:oBclGKpT6zbcZAhdPSVuoxnBDPTS

    Score
    1/10
    behavioral10behavioral9

    • Target

      lib/BinaryPack.dll

    • Size

      61KB

    • MD5

      6181dc681fedbb3d24225ee7f796298a

    • SHA1

      82758a1c0c695040f81098dea9dc2a722809da5e

    • SHA256

      bb86d8edf03f0111c8f58a3ff03196aaf45b789e45e927ecec92fbf7627b3d9f

    • SHA512

      8773b5e4d8b8de658f11abb2e40c6871b432823b8908d483b4a32e690eb9e6d197d9a6c09d6b73c36d862ffc423579ee75552da0a9701a0c44c358886e8ed2f3

    • SSDEEP

      768:gYUBEh9eHge0x+oRYsf7y85+iMsAU6eoubl7EUfCq9QsaROha0hnsO2XNodMsME7:gYU2XhxdDy85+iMsAU3Lcqj4G1ASHVH

    Score
    1/10
    behavioral11behavioral12

    • Target

      lib/DiscordGameSDKWrapper.dll

    • Size

      96KB

    • MD5

      6fb764a15fb45a61e75bdaf1ec2ccefd

    • SHA1

      ab0432e02a6bb39c2c5714fdbde5ae4045a851d7

    • SHA256

      c4e674b22d2264fbc3b1598da44cc142d38aa0c6ae53f97f639ba16e08b1d3f3

    • SHA512

      221f8244f4ed7a19ed7f52261202d2c8930c072c96735a3d52f58a8457a00409057bb04a700d664c45aafc9072fa5040703a1520bf72e271e6f54c1b804b56cb

    • SSDEEP

      1536:Svko7joOfR2n8EvgKWkj9PfcNJYjJ3DykxsCBetaCMI6/5lwj2lKy7FIudp9txxt:S5noOfgn8wMYF3DykxsCBetaCMI6BlwG

    Score
    1/10
    behavioral13behavioral14

    • Target

      lib/JetBrains.Annotations.dll

    • Size

      96KB

    • MD5

      955a2555bec853489dd45dcf7fd10c1c

    • SHA1

      842aac70dc0079ec26e936aa1ccf5dd4e1ddbbc7

    • SHA256

      f5177e397a60a587ab92934a415a5803c7e005360f40042fcdfe3c55bb78abdb

    • SHA512

      2387d8e341539281f27dde35c5f49b19e8078b17bbf4d1bb638f824524686e0e8237564e94c14a26a060f4ad5c8130c0e968a31418ca517653214c6016fa8b47

    • SSDEEP

      768:iRMOA2DVADfs32zAAkLuLc85/MNFvqaZKWjoPDP3hfPmQvjcwo+YtxgAUTdyKL0r:i82lVGe7xOvzxr+LlrLBvl

    Score
    1/10
    behavioral15behavioral16

    • Target

      lib/LZ4.dll

    • Size

      44KB

    • MD5

      3ba98ed918a22936c524daf1a8538ce3

    • SHA1

      758303b0ae09314963d13d2b6d077feb579001df

    • SHA256

      e4bed49f4aef35a4df8bd3090a74ae8ee1b1c299517247cbace062b64bc66c56

    • SHA512

      85ab5b561c9d5ec1a2651f6cf645cf2a5e27558b680c781e76f7cf7abde795a977b878ed5ff606c68bf6a8212eb499bf269155aef9b4de2ae4d1c3aede4de6ea

    • SSDEEP

      768:6cE0yWSGqN3LInEOkvhWfgwH/1iXt/DAMnxQv//9Yt/to7/ittxtxttxU+u1jCtp:6cE/WSGFnEOHgw9wtcWxQv//9Yt/tG/4

    Score
    1/10
    behavioral17behavioral18

    • Target

      lib/LitJSON.dll

    • Size

      60KB

    • MD5

      0618e6e6e60c78b3dfe4933d487102a0

    • SHA1

      01fb560ceaeb1e1f63f3334eb9562140abb595d8

    • SHA256

      b13efed121cc3a76c859d3241684881a9c5a6fab12a9a91e86fc5d108c8dc40b

    • SHA512

      6796e63c0d83ff2c68ecb2a90b1ffbb1707410831353ad0c31c592cc2bdd569122e16d786e0f048e4ee3efae9a90360742fa152c754e75dd233f848491efde1d

    • SSDEEP

      1536:/vDkRnsWMAwZ4mnC3PColWXm8+T35o+bmO15:/vDkRnsAwZ4mnuCL+TpQO15

    Score
    1/10
    behavioral19behavioral20

    • Target

      lib/LiteNetLib.dll

    • Size

      92KB

    • MD5

      7a056177ff891b3f411c18d796a41580

    • SHA1

      5b5c966f3ebba9902a4f209ef8fab10e4885a153

    • SHA256

      99faaa90ebcc5f18e4ac7186d2f2cde4aecd0b9b9adb20a167e06d0336684880

    • SHA512

      c25374c5fec295f9148f3a0874895134e103e37ad3b5c9825c7ebcb5f7d0a6f41b867e9f69327196a1c80037288a711252a1f34c0d3f35194912e6455958d891

    • SSDEEP

      1536:n+35NIlMxaeG72O6Zj+1+ivwrkSjqpJ+q:+35NIWft+MiYnm2q

    Score
    1/10
    behavioral21behavioral22

    • Target

      lib/Microsoft.Win32.Registry.dll

    • Size

      25KB

    • MD5

      59c48aacb1c413c108161afe13fdbed9

    • SHA1

      31ace4b26d8a069c84aad6001e06c2a5483806f3

    • SHA256

      e9a9d281c1a708aaae366f82fd6a1742f65da2918cc4fa5eaaaada0be24277d9

    • SHA512

      8252abe64c67863d9e4c70e820f0c69c517b8678a4b4c13a436118bc276e5f21e84522b93566c0bc009effcb251ed67bdbc60e4907abea2f33b6be3764e28d1d

    • SSDEEP

      384:j4nLpSumfSQrlHViaCZYvLPQmlJLfjnWn6GWfdHRN76+fVlGsa9h:j4QVrxViR9mlxd96lv

    Score
    1/10
    behavioral23behavioral24

    • Target

      lib/Microsoft.WindowsAPICodePack.Shell.dll

    • Size

      529KB

    • MD5

      54fe9a2748c4a0f282d4ec91e3cadc16

    • SHA1

      970b783a697d893ecd4916dd86b5ff7574896c9e

    • SHA256

      e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672

    • SHA512

      c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f

    • SSDEEP

      6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh

    Score
    1/10
    behavioral25behavioral26

    • Target

      lib/Microsoft.WindowsAPICodePack.dll

    • Size

      102KB

    • MD5

      9531b41519156855a45c46f0b379a784

    • SHA1

      00b857f09dcf0c71dab40c1a8c4c54d411fdb197

    • SHA256

      418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0

    • SHA512

      10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0

    • SSDEEP

      3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ

    Score
    1/10
    behavioral27behavioral28

    • Target

      lib/Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    behavioral29behavioral30

    • Target

      lib/Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks