Overview
overview
7Static
static
7Guna.UI2.dll
windows7-x64
1Guna.UI2.dll
windows10-2004-x64
1Nyx.exe
windows7-x64
1Nyx.exe
windows10-2004-x64
3libcurl.dll
windows7-x64
1libcurl.dll
windows10-2004-x64
1monaco/Monaco.html
windows7-x64
3monaco/Monaco.html
windows10-2004-x64
3monaco/NYX...c.html
windows7-x64
3monaco/NYX...c.html
windows10-2004-x64
3monaco/vs/...ain.js
windows7-x64
3monaco/vs/...ain.js
windows10-2004-x64
3monaco/vs/...lua.js
windows7-x64
3monaco/vs/...lua.js
windows10-2004-x64
3monaco/vs/...ain.js
windows7-x64
3monaco/vs/...ain.js
windows10-2004-x64
3monaco/vs/....de.js
windows7-x64
3monaco/vs/....de.js
windows10-2004-x64
3monaco/vs/....es.js
windows7-x64
3monaco/vs/....es.js
windows10-2004-x64
3monaco/vs/....fr.js
windows7-x64
3monaco/vs/....fr.js
windows10-2004-x64
3monaco/vs/....it.js
windows7-x64
3monaco/vs/....it.js
windows10-2004-x64
3monaco/vs/....ja.js
windows7-x64
3monaco/vs/....ja.js
windows10-2004-x64
3monaco/vs/...nls.js
windows7-x64
3monaco/vs/...nls.js
windows10-2004-x64
3monaco/vs/....ko.js
windows7-x64
3monaco/vs/....ko.js
windows10-2004-x64
3monaco/vs/....ru.js
windows7-x64
3monaco/vs/....ru.js
windows10-2004-x64
3Analysis
-
max time kernel
92s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
09-08-2024 10:39
Behavioral task
behavioral1
Sample
Guna.UI2.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Nyx.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Nyx.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
libcurl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
monaco/Monaco.html
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
monaco/Monaco.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
monaco/NYXscriptdoc.html
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
monaco/NYXscriptdoc.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
monaco/vs/base/worker/workerMain.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
monaco/vs/basic-languages/lua/lua.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
monaco/vs/editor/editor.main.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
monaco/vs/editor/editor.main.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
monaco/vs/editor/editor.main.nls.de.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
monaco/vs/editor/editor.main.nls.de.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
monaco/vs/editor/editor.main.nls.es.js
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
monaco/vs/editor/editor.main.nls.es.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
monaco/vs/editor/editor.main.nls.fr.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
monaco/vs/editor/editor.main.nls.fr.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
monaco/vs/editor/editor.main.nls.it.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
monaco/vs/editor/editor.main.nls.it.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
monaco/vs/editor/editor.main.nls.ja.js
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
monaco/vs/editor/editor.main.nls.ja.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
monaco/vs/editor/editor.main.nls.js
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
monaco/vs/editor/editor.main.nls.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
monaco/vs/editor/editor.main.nls.ko.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
monaco/vs/editor/editor.main.nls.ko.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
monaco/vs/editor/editor.main.nls.ru.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
monaco/vs/editor/editor.main.nls.ru.js
Resource
win10v2004-20240802-en
General
-
Target
Nyx.exe
-
Size
1.3MB
-
MD5
c5cc05f8225d34986df5edb27110585f
-
SHA1
72153d746263fb06b4a09a4e4eefee7e564a1bdf
-
SHA256
f3ff153157252269e9c89d7d72e6d1f3fe70f65d37db7625a18c5b20c142adfc
-
SHA512
9510b3abcad016ef649820f5cae73938720a64550165ac0a91838c8eec7fa9c6a7526f5254143903ca35b07b2a8d0e3266276985749d9eff6866febae24ac9b5
-
SSDEEP
24576:mhc9oC1arhc9nC1athc9NY1w6tbZW/6cK45DnSrdiqQzxWMU3kGRpTCZggChc9:mho1arhd1athWcDbE6n4RScLfyXT2Ch
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Nyx.exe = "11001" Nyx.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2280 Nyx.exe 2280 Nyx.exe