General

  • Target

    NYX 4.5 FIXED.zip

  • Size

    8.9MB

  • MD5

    41af6ce49d57f7e797dc02588c30a847

  • SHA1

    7c19acd55fb99978197dee394cd7d20181d949b3

  • SHA256

    4cf67ca41cc4bd7f192d54ee62db3fc035c29f22677266ee6eeef2e0941d32c1

  • SHA512

    9e67ba21c2024edee50e835a15d8ca3b9ae73e2c5eb22dbdd409be82d1e1b90577b4a42e7c38cb535332c933b50e9449656e939b140deacb9bd5006219caa4a7

  • SSDEEP

    196608:X8zPw4+G0kop4qGw7BiGBaossKiTXgKjo45812OHclQ6/BTcE0J26ayPjD:EwEYBURsBTXX811a5oE0J26LP/

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • NYX 4.5 FIXED.zip
    .zip
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Nyx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    14248874c6f626cc676f0d1638a85bc6


    Headers

    Imports

    Exports

    Sections

  • monaco/Monaco.html
    .js
  • monaco/NYXscriptdoc.html
  • monaco/vs/base/worker/workerMain.js
    .js
  • monaco/vs/basic-languages/lua/lua.js
  • monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • monaco/vs/editor/editor.main.css
  • monaco/vs/editor/editor.main.js
    .js
  • monaco/vs/editor/editor.main.nls.de.js
  • monaco/vs/editor/editor.main.nls.es.js
  • monaco/vs/editor/editor.main.nls.fr.js
  • monaco/vs/editor/editor.main.nls.it.js
  • monaco/vs/editor/editor.main.nls.ja.js
  • monaco/vs/editor/editor.main.nls.js
  • monaco/vs/editor/editor.main.nls.ko.js
  • monaco/vs/editor/editor.main.nls.ru.js
  • monaco/vs/editor/editor.main.nls.zh-cn.js
  • monaco/vs/editor/editor.main.nls.zh-tw.js
  • monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • monaco/vs/loader.js
    .js
  • nyxplayerbeta.exe
    .exe windows:6 windows x64 arch:x64

    a89bdbb5ed415ad3d3ec6aed111c65bb


    Headers

    Imports

    Exports

    Sections

  • scripts/Infinite yield.lua
    .js
  • scripts/autosaved.lua
  • scripts/betascript.lua
  • scripts/dark dex.txt
    .js
  • workspace/.tests/appendfile.txt
  • workspace/.tests/delfile.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile.txt
  • workspace/4483381587.rbxlx
  • workspace/4483381587.txt
  • workspace/5972698540.rbxlx
  • workspace/6af56c1753ac6679dee3acbd1fd952e5-cache.lua
    .js
  • workspace/IY_FE.iy
  • workspace/IY_FEiy
  • workspace/autoParryByFFJ.json
  • workspace/print.lua
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections