General

  • Target

    NYX 4.8.zip

  • Size

    114.6MB

  • Sample

    240821-z7swbs1dph

  • MD5

    134c26711ce72deb1cdfcec54db50d08

  • SHA1

    e2d37bf51dad9b128d42063ee786c1a4ea1f5ff8

  • SHA256

    734c436f7a0293e97c746756395eb1cf5f7dc628ed7b20d6c0da953fd03fb060

  • SHA512

    37d1e4170c295bda7c0181921b923304164111eaccfe5d344af745b54c0d61c4f0d7d61c0c1b08f5e3308221b287d6951bce195defda55ed6543bbe6dbc9e0cc

  • SSDEEP

    3145728:PriOqZ9Li+5L+m/YOcSZX2/hv8LKNpG2Ffs0:ziL9LpKm/jcSZXOV8q1Ffs0

Score
8/10

Malware Config

Targets

    • Target

      Nyx.exe

    • Size

      4.8MB

    • MD5

      705cd81c1c73cb69a1ddd255464a6d27

    • SHA1

      725db292f972b1f46d70d1e29dba97de100ea78a

    • SHA256

      2788d9bbc9a3f72f224a0674ac0035ceca355d6549eeb2f64ad82dabf7ce9125

    • SHA512

      7ca09167d41e1820deac3397e6520ba2fe703144b4b38a2c7e7f7d4cfc5c495f1b246cc718bf46580f5320c4ccefce9b6c634ea08f2bece4dfceda5b84a17086

    • SSDEEP

      98304:/VPgMPPSCUP71CqUfzfCCArpCl8ioZX80utK8RUgDBepuJc:/VPgsSvIqkfCCQC+f80mK8iZu

    Score
    8/10
    • Downloads MZ/PE file

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks