General

  • Target

    Unconfirmed 601024.crdownload

  • Size

    8.9MB

  • MD5

    926e6e63f9df75420b7964345fbb84c5

  • SHA1

    d11759590852f2ac94a3f86fb86f2d30e7134a35

  • SHA256

    661324fbbc8c41a7a2c1cb6fa8430ed60bde6d032b871b1a56586948a990e197

  • SHA512

    b48908f397340567df63b337087a5d62d76a962f8860aafb95e0ce54301a87fb95fc22b3df53949fa174e7b3fe264756676e2e8a1b90f490399897e1c80aa440

  • SSDEEP

    196608:98zPw4KF/kop4qGwABiGBaossKiTXgKjo45812OHclQ6/BTcE0JN6ayPim:qwujBURsBTXX811a5oE0JN6LPZ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Unconfirmed 601024.crdownload
    .zip
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Nyx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    14248874c6f626cc676f0d1638a85bc6


    Headers

    Imports

    Exports

    Sections

  • monaco/Monaco.html
    .js
  • monaco/NYXscriptdoc.html
  • monaco/vs/base/worker/workerMain.js
    .js
  • monaco/vs/basic-languages/lua/lua.js
  • monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • monaco/vs/editor/editor.main.css
  • monaco/vs/editor/editor.main.js
    .js
  • monaco/vs/editor/editor.main.nls.de.js
  • monaco/vs/editor/editor.main.nls.es.js
  • monaco/vs/editor/editor.main.nls.fr.js
  • monaco/vs/editor/editor.main.nls.it.js
  • monaco/vs/editor/editor.main.nls.ja.js
  • monaco/vs/editor/editor.main.nls.js
  • monaco/vs/editor/editor.main.nls.ko.js
  • monaco/vs/editor/editor.main.nls.ru.js
  • monaco/vs/editor/editor.main.nls.zh-cn.js
  • monaco/vs/editor/editor.main.nls.zh-tw.js
  • monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • monaco/vs/loader.js
    .js
  • nyxplayerbeta.exe
    .exe windows:6 windows x64 arch:x64

    a89bdbb5ed415ad3d3ec6aed111c65bb


    Headers

    Imports

    Exports

    Sections

  • scripts/Infinite yield.lua
    .js
  • scripts/autosaved.lua
  • scripts/betascript.lua
  • scripts/dark dex.txt
    .js
  • workspace/.tests/appendfile.txt
  • workspace/.tests/delfile.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile.txt
  • workspace/4483381587.rbxlx
  • workspace/4483381587.txt
  • workspace/5972698540.rbxlx
  • workspace/6af56c1753ac6679dee3acbd1fd952e5-cache.lua
    .js
  • workspace/IY_FE.iy
  • workspace/IY_FEiy
  • workspace/autoParryByFFJ.json
  • workspace/print.lua
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections