Overview

overview

7

Static

static

7

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

Nyx.exe

windows7-x64

1

Nyx.exe

windows10-2004-x64

3

libcurl.dll

windows7-x64

1

libcurl.dll

windows10-2004-x64

1

monaco/Monaco.html

windows7-x64

3

monaco/Monaco.html

windows10-2004-x64

3

monaco/NYX...c.html

windows7-x64

3

monaco/NYX...c.html

windows10-2004-x64

3

monaco/vs/...ain.js

windows7-x64

3

monaco/vs/...ain.js

windows10-2004-x64

3

monaco/vs/...lua.js

windows7-x64

3

monaco/vs/...lua.js

windows10-2004-x64

3

monaco/vs/...ain.js

windows7-x64

3

monaco/vs/...ain.js

windows10-2004-x64

3

monaco/vs/....de.js

windows7-x64

3

monaco/vs/....de.js

windows10-2004-x64

3

monaco/vs/....es.js

windows7-x64

3

monaco/vs/....es.js

windows10-2004-x64

3

monaco/vs/....fr.js

windows7-x64

3

monaco/vs/....fr.js

windows10-2004-x64

3

monaco/vs/....it.js

windows7-x64

3

monaco/vs/....it.js

windows10-2004-x64

3

monaco/vs/....ja.js

windows7-x64

3

monaco/vs/....ja.js

windows10-2004-x64

3

monaco/vs/...nls.js

windows7-x64

3

monaco/vs/...nls.js

windows10-2004-x64

3

monaco/vs/....ko.js

windows7-x64

3

monaco/vs/....ko.js

windows10-2004-x64

3

monaco/vs/....ru.js

windows7-x64

3

monaco/vs/....ru.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NYX 4.5 FIXED.zip

  • Size

    8.9MB

  • Sample

    240809-mqgqhstcna

  • MD5

    926e6e63f9df75420b7964345fbb84c5

  • SHA1

    d11759590852f2ac94a3f86fb86f2d30e7134a35

  • SHA256

    661324fbbc8c41a7a2c1cb6fa8430ed60bde6d032b871b1a56586948a990e197

  • SHA512

    b48908f397340567df63b337087a5d62d76a962f8860aafb95e0ce54301a87fb95fc22b3df53949fa174e7b3fe264756676e2e8a1b90f490399897e1c80aa440

  • SSDEEP

    196608:98zPw4KF/kop4qGwABiGBaossKiTXgKjo45812OHclQ6/BTcE0JN6ayPim:qwujBURsBTXX811a5oE0JN6LPZ

Score
7/10
discoveryexecutionvmprotect

Malware Config

Targets

    • Target

      Guna.UI2.dll

    • Size

      3.8MB

    • MD5

      846a7e5993282e220b26b82e7a39a40a

    • SHA1

      e37fe15d2fb33753c042e16d1d008d412e7d99e7

    • SHA256

      5613682635617cd43720807448f69b10090932e8571a358b92361d2a2c7a4597

    • SHA512

      fcf608391d7f8406bb538aca0e9dafb804cceda6c590dcd98d684645bc3bfc0c1d43455a74854988b4b30e56a68ef8be886e92e993f1504b49f0e4baa1c0cc0b

    • SSDEEP

      24576:d1N5YmLfrTboUFM1dFqgWy/KKu7wG0Q/vtDyaBhTDs1l+zTdE+LHQ/jz4AN3KC:dLDoUFmagPKKu7wG0QHBTal+fa+PAv

    Score
    1/10
    behavioral1behavioral2

    • Target

      Nyx.exe

    • Size

      1.3MB

    • MD5

      c5cc05f8225d34986df5edb27110585f

    • SHA1

      72153d746263fb06b4a09a4e4eefee7e564a1bdf

    • SHA256

      f3ff153157252269e9c89d7d72e6d1f3fe70f65d37db7625a18c5b20c142adfc

    • SHA512

      9510b3abcad016ef649820f5cae73938720a64550165ac0a91838c8eec7fa9c6a7526f5254143903ca35b07b2a8d0e3266276985749d9eff6866febae24ac9b5

    • SSDEEP

      24576:mhc9oC1arhc9nC1athc9NY1w6tbZW/6cK45DnSrdiqQzxWMU3kGRpTCZggChc9:mho1arhd1athWcDbE6n4RScLfyXT2Ch

    Score
    3/10
    behavioral3behavioral4

    • Target

      libcurl.dll

    • Size

      557KB

    • MD5

      bc4f7edf27ec19d796c2b9720a0d0711

    • SHA1

      b7e49d641660d18c0977401e8b83cafa7475b2e9

    • SHA256

      fd1facd293ffb60699ec797b8ff3553d3165f83d8e4f14ebbcfe3f3af87cb3cb

    • SHA512

      e5deb07db01ee273a96e6684ab04bf425fedb0933f3f7db2eecfa3ae9e678fc1402bc1e7dc19fe0cb87f240af39f69d52f7003e84d809fd475d672f02a2a6d50

    • SSDEEP

      12288:E/4zHAn7aOe5hR+e+VTXtz3m5+LIbaaDMhg2/FOhGteRl:TzAn7aZB+BBz38aaDMhg2/FOhGy

    Score
    1/10
    behavioral5behavioral6

    • Target

      monaco/Monaco.html

    • Size

      47KB

    • MD5

      d65261c2e83ae0319cb5e931d3cd813b

    • SHA1

      b13189b8e6c82f9db00985483867e2ec27c99ccf

    • SHA256

      520aa43d592bb8171d7cb015cdf6b8a2f5ae007be9a7a154c8f7c48b6f33b54a

    • SHA512

      3e6e544d3947fa7b5a0391e84f6157b155f7a67cccff81b892a8d3c2f2303bf9003bf6ad3033df6cfcb809cf22a8208a8dbfb804a01d1b1b3def8322d14ababa

    • SSDEEP

      768:TWi2Np6OXoy/21rxzD80kShCTrw4mkMXQnb1fqKTr5q4QVGQ6riAT+e3N9vnwJV3:d2Npdoy/21lkSMw4mkMXQnb1fqir5q4I

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      monaco/NYXscriptdoc.html

    • Size

      9KB

    • MD5

      6e82bc5399815832088047710a99ed63

    • SHA1

      9cc138cc30226950d3c41021bc36c426316e7acd

    • SHA256

      6f04c59cf624a7c26ec563b26b1d0eec2beeea02b5fb2dbd64e865b2eb8165c4

    • SHA512

      9cbfd385ec93a1c7e6f3c87efae3ea42da719f253bb0bc070e8491a214cb6919462e709a0fdcd1cb23d22f78569116478a033cda65159a0b40ca712e9100cdcb

    • SSDEEP

      96:GCKL3WpH0VrADnyVBMc7BVf96firr/llTVFZbDGr3JY5B98PNhc:GCY60VnuORUqrjDTVnnnShc

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      monaco/vs/base/worker/workerMain.js

    • Size

      149KB

    • MD5

      27ead90c7702154755785e0e53398755

    • SHA1

      86b59485fe6f6ccb1805183fa75062a2ac1c859e

    • SHA256

      bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5

    • SHA512

      6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82

    • SSDEEP

      1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      monaco/vs/basic-languages/lua/lua.js

    • Size

      8KB

    • MD5

      9cf08ada63c048e4e38c8816409ed958

    • SHA1

      75a2564071cb1ff7c160d6ed385b9c32ed8a45df

    • SHA256

      c171352021b601d49147f9c8a8b241ca0d8e905f79937164ac824ad2ff3f9ccc

    • SHA512

      636e25d27ecd211b535845c7f7e5b546a5f50ccfa5d321d37fac0a155b6a001047f86bb5e514ee138efb82b88da6c3e4ea3db2a0bcf4918a274c9ff33145dd34

    • SSDEEP

      96:SD3yDUnHWD5dyVLY7SvEFR88iqIZkQBZZMP4etFbhBuMCL8CvcOAtOfxBVkxMZlT:nDGHydyNY7SsfkFedmUtOfxQxjE

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      monaco/vs/editor/editor.main.js

    • Size

      2.0MB

    • MD5

      9399a8eaa741d04b0ae6566a5ebb8106

    • SHA1

      5646a9d35b773d784ad914417ed861c5cba45e31

    • SHA256

      93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18

    • SHA512

      d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8

    • SSDEEP

      24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      monaco/vs/editor/editor.main.nls.de.js

    • Size

      36KB

    • MD5

      4d83bc1bced6f773423be6f939472cfe

    • SHA1

      1b42889a7f580df9f7d399c33141d38548143ed1

    • SHA256

      0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae

    • SHA512

      c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4

    • SSDEEP

      768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      monaco/vs/editor/editor.main.nls.es.js

    • Size

      37KB

    • MD5

      b371235f971baa51f58f123f40c4435a

    • SHA1

      843d4a2d214c7d9da650cf4d0c6981ac1dab69c6

    • SHA256

      203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba

    • SHA512

      77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a

    • SSDEEP

      384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      monaco/vs/editor/editor.main.nls.fr.js

    • Size

      40KB

    • MD5

      d319e61fc6b357b9a5d8e3bbaa44ce3c

    • SHA1

      b1539b082b2b8290f05dfe17d6fee3d64b2ec244

    • SHA256

      7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99

    • SHA512

      6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6

    • SSDEEP

      768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      monaco/vs/editor/editor.main.nls.it.js

    • Size

      38KB

    • MD5

      a8855a662eb4d3a771fdab7ba6287def

    • SHA1

      a78b57810ac8e9704e97897c6168f4140d2eadf7

    • SHA256

      f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab

    • SHA512

      1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5

    • SSDEEP

      768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      monaco/vs/editor/editor.main.nls.ja.js

    • Size

      41KB

    • MD5

      a1f3c9e940206ca310147d644305a6e1

    • SHA1

      005a8f7023b9d873962c7272203cc0c0d0ccc624

    • SHA256

      ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f

    • SHA512

      f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69

    • SSDEEP

      384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      monaco/vs/editor/editor.main.nls.js

    • Size

      31KB

    • MD5

      74dd2381ddbb5af80ce28aefed3068fc

    • SHA1

      0996dc91842ab20387e08a46f3807a3f77958902

    • SHA256

      fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48

    • SHA512

      8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e

    • SSDEEP

      384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      monaco/vs/editor/editor.main.nls.ko.js

    • Size

      36KB

    • MD5

      9ccf83d22e9a9bfafa2000f366ac47e6

    • SHA1

      be61e121af1a363aa66d875f46e78562a603566e

    • SHA256

      100ca482c015571ed9aad97c2dcc5e266b270a650ce892507443b5d4f32df64f

    • SHA512

      3d68816994abff5c528610733cc729e91d390422c2ee2259dcef3cc4db9a599c1f3800f412259fe2f9a700bf2847b942a253986c011c659868bc9edaae6c2f16

    • SSDEEP

      384:hS67TmO5oU1Yh4XK8ApE6/z2dHDNV1KiAaA+17tDDN3H6Sg4s/zKz8G3uyroDXYd:rmO5oGXrmi1zDB12zKzuyroKcNVk

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      monaco/vs/editor/editor.main.nls.ru.js

    • Size

      56KB

    • MD5

      fd1aa66906d2b3c0c9b734b17f04d73b

    • SHA1

      299145469d5d5397a42274ccc908c865ebc46cfa

    • SHA256

      fa180f7b77ee252aefe73ba5993fbe7c89f43482358d7fd32e8e2f50b3b21bed

    • SHA512

      235c2ea1806c13dc0b85f06b5c9f2f811bd145968e2a0ad47c3fa1e063d408efc034dca7baf0b91942cc34e995d1274692c5556c2fb875dbb1054157da9c0132

    • SSDEEP

      768:CXH0AKgvFBBK1ED81Z0LVdcan9oUxPr1TPgFuEFYPm/XftWZc:CXHXNtBBK1SLVdcan9oWPgFuEFYPm/d

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

vmprotect
Score
7/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10