Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

09/08/2024, 01:11 UTC

240809-bkehesxfmf 8

09/08/2024, 01:07 UTC

240809-bg4m5stfjm 8

09/08/2024, 01:04 UTC

240809-bfazfaxeld 7

09/08/2024, 00:52 UTC

240809-a7538atcnp 7

General

  • Target

    Unconfirmed 601024.crdownload

  • Size

    8.9MB

  • MD5

    926e6e63f9df75420b7964345fbb84c5

  • SHA1

    d11759590852f2ac94a3f86fb86f2d30e7134a35

  • SHA256

    661324fbbc8c41a7a2c1cb6fa8430ed60bde6d032b871b1a56586948a990e197

  • SHA512

    b48908f397340567df63b337087a5d62d76a962f8860aafb95e0ce54301a87fb95fc22b3df53949fa174e7b3fe264756676e2e8a1b90f490399897e1c80aa440

  • SSDEEP

    196608:98zPw4KF/kop4qGwABiGBaossKiTXgKjo45812OHclQ6/BTcE0JN6ayPim:qwujBURsBTXX811a5oE0JN6LPZ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Unconfirmed 601024.crdownload
    .zip
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Nyx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    14248874c6f626cc676f0d1638a85bc6


    Headers

    Imports

    Exports

    Sections

  • monaco/Monaco.html
    .js
  • monaco/NYXscriptdoc.html
  • monaco/vs/base/worker/workerMain.js
    .js
  • monaco/vs/basic-languages/lua/lua.js
  • monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • monaco/vs/editor/editor.main.css
  • monaco/vs/editor/editor.main.js
    .js
  • monaco/vs/editor/editor.main.nls.de.js
  • monaco/vs/editor/editor.main.nls.es.js
  • monaco/vs/editor/editor.main.nls.fr.js
  • monaco/vs/editor/editor.main.nls.it.js
  • monaco/vs/editor/editor.main.nls.ja.js
  • monaco/vs/editor/editor.main.nls.js
  • monaco/vs/editor/editor.main.nls.ko.js
  • monaco/vs/editor/editor.main.nls.ru.js
  • monaco/vs/editor/editor.main.nls.zh-cn.js
  • monaco/vs/editor/editor.main.nls.zh-tw.js
  • monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • monaco/vs/loader.js
    .js
  • nyxplayerbeta.exe
    .exe windows:6 windows x64 arch:x64

    a89bdbb5ed415ad3d3ec6aed111c65bb


    Headers

    Imports

    Exports

    Sections

  • scripts/Infinite yield.lua
    .js
  • scripts/autosaved.lua
  • scripts/betascript.lua
  • scripts/dark dex.txt
    .js
  • workspace/.tests/appendfile.txt
  • workspace/.tests/delfile.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile.txt
  • workspace/4483381587.rbxlx
  • workspace/4483381587.txt
  • workspace/5972698540.rbxlx
  • workspace/6af56c1753ac6679dee3acbd1fd952e5-cache.lua
    .js
  • workspace/IY_FE.iy
  • workspace/IY_FEiy
  • workspace/autoParryByFFJ.json
  • workspace/print.lua
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.