92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a

Sharing

Copy URL Twitter E-mail

General

Target
Nitrox_1.7.1.0.zip
Size 7.8MB
Sample241010-tbtvvstdkb
SHA256 92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a
MD5 f7d25be0395feec244bc865acfa07043
SHA1 b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d
SHA512 8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29
SSDEEP 196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Targets

- Target
  lib/Microsoft.WindowsAPICodePack.dll
- Size 102KB
- SHA256 418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0
- MD5 9531b41519156855a45c46f0b379a784
- SHA1 00b857f09dcf0c71dab40c1a8c4c54d411fdb197
- SHA512 10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0
- SSDEEP 3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  lib/Mono.Cecil.Mdb.dll
- Size 42KB
- SHA256 411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
- MD5 1c6aca0f1b1fa1661fc1e43c79334f7c
- SHA1 ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
- SHA512 1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
- SSDEEP 768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  lib/Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4
- MD5 6d5eb860c2be5dbeb470e7d3f3e7dda4
- SHA1 80c76660b87c52127b1a7da48e27700f75362041
- SHA512 64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5
- SSDEEP 1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  lib/Mono.Cecil.Rocks.dll
- Size 27KB
- SHA256 2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e
- MD5 6e7f0f4fff6c49e3f66127c23b7f1a53
- SHA1 14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a
- SHA512 0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e
- SSDEEP 384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  lib/Mono.Cecil.dll
- Size 350KB
- SHA256 f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc
- MD5 de69bb29d6a9dfb615a90df3580d63b1
- SHA1 74446b4dcc146ce61e5216bf7efac186adf7849b
- SHA512 6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015
- SSDEEP 6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  lib/Mono.Nat.dll
- Size 67KB
- SHA256 1119d22cb1ecf7c402a6893cfdfb92c66340d80cb7791f33c3502f8932284b81
- MD5 05164f22c0b8a36ef01309e78d07b241
- SHA1 618c2ea99a0994cf61fcd53d03f5d309fcf7dc4e
- SHA512 63991123b116be8bac9ef7ce1c2913dcc8aa966679215506994cf7d6f2d43f22aa6fc0243759a01c8904e3e6a374bef37666df78a1631d3894eafa4a3c638678
- SSDEEP 1536:s2CjOAhap6ntQDOx5622PAZVyJu7TZs6/JugDsb61Xy:s2DS769zwXZs6/K8C
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  lib/MonoMod.RuntimeDetour.dll
- Size 106KB
- SHA256 ad262f74b7c71350b95f2b222f281d5f013a15811b8b6f1eda4404f209c5ed15
- MD5 eb49f0b61a7c53d369d9ed0cdb37b03b
- SHA1 7500629e55c5285954423d0701f5e3d6c4d7e98c
- SHA512 a40de9c13a3ccf45d743572c44379e1fbfb670a2cd674b1b2d88a0875117ee4f6a79ffcf9d61ed0971e0df7d608eea399f2fd87a987e20e5d2a773f6ad745824
- SSDEEP 3072:7HxL1bMURv+pM5HHWsaYlG58zAveC2pZ:7tOUw25H2RYlI8zAvu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  lib/MonoMod.Utils.dll
- Size 191KB
- SHA256 0ae1ffbd5e761f88c723d34581ddc1ab93c622ba2f5c938c42fb639da405e113
- MD5 4eb70dea0151b4fa6205fe90e3cd0d08
- SHA1 a39c9692ae2a58cf985d23369fd7f292b168ff12
- SHA512 537846b97ef7df829acbe93aa7dc08910a45a2d50022dfda239e6ce7326323735371b82013cb72c59801b69727975f211f8b97ba8a1d979c13a3c6a85275172f
- SSDEEP 3072:vdL+ydm5dPMsWWVm24ij8QCkMrCvv9vLhBhZk9TuT1eylmseFJuh:B6mshbj8Q/vlPkeRKJu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  lib/Newtonsoft.Json.dll
- Size 683KB
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  lib/NitroxClient.dll
- Size 520KB
- SHA256 2709adf96cc05dfe6224dc4be96212f13e5692468da8c9772c3aa9b05a1d34ca
- MD5 ddfae289d082d6f45199ae1fec630d83
- SHA1 31b1d96c005835dc6200d1bd7b5a8b6daa75e07c
- SHA512 28269614b5ac22ecd97d34882ab1898ecf16915cb035815983c1bba63cc3853203a23c61b5f5c9e1bfafb87ac347bf3e535029753925edf9e2a21db481f73944
- SSDEEP 12288:+8qDxEGo5+2m2G22v3H56TN1SCgITCw1Ium4d9Tq5zXIhQ1oOP256BjgXcLhvKs1:kxvoTNlOP1gXcLhlZv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  lib/NitroxModel-Subnautica.dll
- Size 39KB
- SHA256 f98a438b86231ee25d72eac8bc32ab0a828d8c032fbe127dc3392d1fc4785f05
- MD5 8a87dedbe34fd9619df25b052712d6fc
- SHA1 1a3f7b435ccd5e670a2fd07aaec9bb43cf5d8603
- SHA512 8b52cf44aa6508c03e56b222597fd85451a2a40407ff2cbbeac7dae32230259f216fde874a90c5caf6cc954798aa925488560ccbf9054ee4c2da7c7e3a528424
- SSDEEP 768:rtfzC7NxQzMiLyrbA76h0mo4jCzOnE9EKJzgGT6lii1T8:rAuMiLyrbel4jC79P84W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  lib/NitroxModel.dll
- Size 224KB
- SHA256 6bf03b400e80d210108f51884adc8bfa038cf4d2f17dee64e4746642684f771c
- MD5 a9f052f7b1f8ca4e5ed949c881b38ec8
- SHA1 2c751c2214409fe911db9330d646b8e1965e2ff7
- SHA512 9e1371358ef8232441876bda815deb8c35276d92c9962308448a366dbf860576f4f6c84328007217448261c597593cc9185141a927fdad4b4f4e705207b9daa7
- SSDEEP 6144:07cBigawt7cDYF/zCAkj8G6mfOP7ibYYSXLrSm9:07c5awt7ptzCAyvOP7fn9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  lib/NitroxPatcher.dll
- Size 188KB
- SHA256 17077629958eec175053e0e596a6b3f633dc2a55db75ecd9cf18167a2fe8700c
- MD5 9b43f0a00935c270799990321f762402
- SHA1 262c8dcf66ec0865391161d85b4b55f3e288029c
- SHA512 a9c3247d90bd098d736d306cae5b29af245b70a71d6a6cfac2c292b24dc33999ee21bcd1cc73e1279f385b8a1b89339e2f6d79260a5aa6a7fbbe2d4ff340480c
- SSDEEP 3072:YIvkQ4HNbf7x48tolHDOMe5/F7snlkKsgfzwmCeiCffZzxfl9JF:YIiOjde5/F7IlkKfzwl2BJl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  lib/NitroxServer.dll
- Size 183KB
- SHA256 d7ddea8c39e0393827329331c05629a3f0b33bbb25a2160afdfbb3e7f828be7e
- MD5 086816218c8e75782892150d1101b2d1
- SHA1 93da0554715b310264e60f166cade17fa32746d0
- SHA512 64489d90f5e5b2cc4ea0b9a7e8277ae09a287c60f60c7b44cb22856cf87dc26eb0477d14a37804803195aff21a7f60a7c74a80a0332fc469016110c285a06f94
- SSDEEP 3072:JFWU8V/74sOdr4HHVmabmewRsJtMc/eYfgQYEfBbHKM4:JFWh7mKBvxt3/Z44h
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  lib/Serilog.Sinks.Async.dll
- Size 9KB
- SHA256 4b81bbdaedc06cf231f810b6eb494401c86a30eee8679db3bea2f86485b20ced
- MD5 44feed047bde92dbd84b3c63d8296b0a
- SHA1 98492e2eac15898b49b37e0bc35aca6e1706298d
- SHA512 932a62c2ed84ade0de8b443f8d247d79dd2aa7c8a3652d95c680a06f789e95e019a300e5a261b143f673985c2ebed59a9815798725ff92d11107ceec0e9e426d
- SSDEEP 192:E8Eu3/+RsgQPwrcVvr7zk7GIKmiE47xtTxcdAC:cRsgQorcVvr7zk7Gzmo7xpxcdAC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  lib/Serilog.Sinks.File.dll
- Size 32KB
- SHA256 5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
- MD5 c25357a7950dcfc7f85ee9d593cb1a24
- SHA1 6a533712852465ab3c11b5c76004312d6482f07f
- SHA512 30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6
- SSDEEP 768:0E4c3g4vuh+t/j7zAJ0eBHdDaXRrbNoihV0gZ:2ktt/Hk2eCXR9/p
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32