Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3NYX.zip
windows7-x64
1NYX.zip
windows10-2004-x64
1CefSharp.C...me.dll
windows7-x64
3CefSharp.C...me.dll
windows10-2004-x64
3Nyx.exe
windows7-x64
6Nyx.exe
windows10-2004-x64
8Nyx.exe.config
windows7-x64
3Nyx.exe.config
windows10-2004-x64
3d3dcompiler_47.dll
windows10-2004-x64
3debug.log
windows7-x64
1debug.log
windows10-2004-x64
1lib/ace/ace.html
windows7-x64
3lib/ace/ace.html
windows10-2004-x64
3lib/ace/ace/ace.js
windows7-x64
3lib/ace/ace/ace.js
windows10-2004-x64
3lib/ace/ac...ify.js
windows7-x64
3lib/ace/ac...ify.js
windows10-2004-x64
3lib/ace/ac...ens.js
windows7-x64
3lib/ace/ac...ens.js
windows10-2004-x64
3lib/ace/ac...ite.js
windows7-x64
3lib/ace/ac...ite.js
windows10-2004-x64
3lib/ace/ac...met.js
windows7-x64
3lib/ace/ac...met.js
windows10-2004-x64
3lib/ace/ac...ker.js
windows7-x64
3lib/ace/ac...ker.js
windows10-2004-x64
3lib/ace/ac...enu.js
windows7-x64
3lib/ace/ac...enu.js
windows10-2004-x64
3lib/ace/ac...ols.js
windows7-x64
3lib/ace/ac...ols.js
windows10-2004-x64
3lib/ace/ac...ing.js
windows7-x64
3lib/ace/ac...ing.js
windows10-2004-x64
3lib/ace/ac...ist.js
windows7-x64
3Analysis
-
max time kernel
92s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2024, 15:43
Static task
static1
Behavioral task
behavioral1
Sample
NYX.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
NYX.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CefSharp.Core.Runtime.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CefSharp.Core.Runtime.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Nyx.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Nyx.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Nyx.exe.config
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Nyx.exe.config
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
debug.log
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
debug.log
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
lib/ace/ace.html
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
lib/ace/ace.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
lib/ace/ace/ace.js
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
lib/ace/ace/ace.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
lib/ace/ace/ext-beautify.js
Resource
win7-20240708-en
Behavioral task
behavioral17
Sample
lib/ace/ace/ext-beautify.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
lib/ace/ace/ext-code_lens.js
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
lib/ace/ace/ext-code_lens.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
lib/ace/ace/ext-elastic_tabstops_lite.js
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
lib/ace/ace/ext-elastic_tabstops_lite.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
lib/ace/ace/ext-emmet.js
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
lib/ace/ace/ext-emmet.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
lib/ace/ace/ext-error_marker.js
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
lib/ace/ace/ext-error_marker.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
lib/ace/ace/ext-keybinding_menu.js
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
lib/ace/ace/ext-keybinding_menu.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
lib/ace/ace/ext-language_tools.js
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
lib/ace/ace/ext-language_tools.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
lib/ace/ace/ext-linking.js
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
lib/ace/ace/ext-linking.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
lib/ace/ace/ext-modelist.js
Resource
win7-20240708-en
General
-
Target
NYX.zip
-
Size
140.9MB
-
MD5
d3496d01232b84a990127079813f7a0e
-
SHA1
6c5de1afdb7ba5a73315b2b09e59d0786d0ef44f
-
SHA256
183160e943a1e0b38a07dc0d6fd775a32180bdee16cc5b5df90330276e95bd44
-
SHA512
a72192fa74df1ab00b596d3cb458a38b911378275f00797a251756dbf4da619d4663e5a85e9f261881248a8c88ec2101845ff596d705b2398313a774383225aa
-
SSDEEP
3145728:q10da5d4vVH3qZ9Li+5L+m/YOcSZX2/hv8LKNwzKnm0YG+FfsR:q10AY9H89LpKm/jcSZXOV81zKmLTFfsR
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3232 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3232 vlc.exe -
Suspicious use of FindShellTrayWindow 20 IoCs
pid Process 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe -
Suspicious use of SendNotifyMessage 19 IoCs
pid Process 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe 3232 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3232 vlc.exe
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\NYX.zip1⤵PID:3184
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\WaitApprove.DVR-MS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
79B
MD535658baae51a174ca107ed1efeed1280
SHA152da9910df7e3eca58532486e5a30ebf2faa6e59
SHA256dee6febc6eb7ff4629f36686a744257af6ca1b626bb508783b02be783e882721
SHA512c2a5727d332ffd4a7c08ed8f22eac1c6c26e98ae186fade8fb233565c4a239a65ff606680d5eaeea7ed3796a7770e8fcc3dc9f3dc2b54d2a8abc8da6752e8bd5