General

  • Target

    Nitrox_1.7.1.0.zip

  • Size

    7.8MB

  • Sample

    241010-tbtvvstdkb

  • MD5

    f7d25be0395feec244bc865acfa07043

  • SHA1

    b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d

  • SHA256

    92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a

  • SHA512

    8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29

  • SSDEEP

    196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF

Score
3/10

Malware Config

Targets

    • Target

      lib/Microsoft.WindowsAPICodePack.dll

    • Size

      102KB

    • MD5

      9531b41519156855a45c46f0b379a784

    • SHA1

      00b857f09dcf0c71dab40c1a8c4c54d411fdb197

    • SHA256

      418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0

    • SHA512

      10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0

    • SSDEEP

      3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ

    Score
    1/10
    • Target

      lib/Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    • Target

      lib/Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    • Target

      lib/Mono.Cecil.Rocks.dll

    • Size

      27KB

    • MD5

      6e7f0f4fff6c49e3f66127c23b7f1a53

    • SHA1

      14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a

    • SHA256

      2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e

    • SHA512

      0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e

    • SSDEEP

      384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd

    Score
    1/10
    • Target

      lib/Mono.Cecil.dll

    • Size

      350KB

    • MD5

      de69bb29d6a9dfb615a90df3580d63b1

    • SHA1

      74446b4dcc146ce61e5216bf7efac186adf7849b

    • SHA256

      f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc

    • SHA512

      6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015

    • SSDEEP

      6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD

    Score
    1/10
    • Target

      lib/Mono.Nat.dll

    • Size

      67KB

    • MD5

      05164f22c0b8a36ef01309e78d07b241

    • SHA1

      618c2ea99a0994cf61fcd53d03f5d309fcf7dc4e

    • SHA256

      1119d22cb1ecf7c402a6893cfdfb92c66340d80cb7791f33c3502f8932284b81

    • SHA512

      63991123b116be8bac9ef7ce1c2913dcc8aa966679215506994cf7d6f2d43f22aa6fc0243759a01c8904e3e6a374bef37666df78a1631d3894eafa4a3c638678

    • SSDEEP

      1536:s2CjOAhap6ntQDOx5622PAZVyJu7TZs6/JugDsb61Xy:s2DS769zwXZs6/K8C

    Score
    1/10
    • Target

      lib/MonoMod.RuntimeDetour.dll

    • Size

      106KB

    • MD5

      eb49f0b61a7c53d369d9ed0cdb37b03b

    • SHA1

      7500629e55c5285954423d0701f5e3d6c4d7e98c

    • SHA256

      ad262f74b7c71350b95f2b222f281d5f013a15811b8b6f1eda4404f209c5ed15

    • SHA512

      a40de9c13a3ccf45d743572c44379e1fbfb670a2cd674b1b2d88a0875117ee4f6a79ffcf9d61ed0971e0df7d608eea399f2fd87a987e20e5d2a773f6ad745824

    • SSDEEP

      3072:7HxL1bMURv+pM5HHWsaYlG58zAveC2pZ:7tOUw25H2RYlI8zAvu

    Score
    1/10
    • Target

      lib/MonoMod.Utils.dll

    • Size

      191KB

    • MD5

      4eb70dea0151b4fa6205fe90e3cd0d08

    • SHA1

      a39c9692ae2a58cf985d23369fd7f292b168ff12

    • SHA256

      0ae1ffbd5e761f88c723d34581ddc1ab93c622ba2f5c938c42fb639da405e113

    • SHA512

      537846b97ef7df829acbe93aa7dc08910a45a2d50022dfda239e6ce7326323735371b82013cb72c59801b69727975f211f8b97ba8a1d979c13a3c6a85275172f

    • SSDEEP

      3072:vdL+ydm5dPMsWWVm24ij8QCkMrCvv9vLhBhZk9TuT1eylmseFJuh:B6mshbj8Q/vlPkeRKJu

    Score
    1/10
    • Target

      lib/Newtonsoft.Json.dll

    • Size

      683KB

    • MD5

      6815034209687816d8cf401877ec8133

    • SHA1

      1248142eb45eed3beb0d9a2d3b8bed5fe2569b10

    • SHA256

      7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814

    • SHA512

      3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721

    • SSDEEP

      12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc

    Score
    1/10
    • Target

      lib/NitroxClient.dll

    • Size

      520KB

    • MD5

      ddfae289d082d6f45199ae1fec630d83

    • SHA1

      31b1d96c005835dc6200d1bd7b5a8b6daa75e07c

    • SHA256

      2709adf96cc05dfe6224dc4be96212f13e5692468da8c9772c3aa9b05a1d34ca

    • SHA512

      28269614b5ac22ecd97d34882ab1898ecf16915cb035815983c1bba63cc3853203a23c61b5f5c9e1bfafb87ac347bf3e535029753925edf9e2a21db481f73944

    • SSDEEP

      12288:+8qDxEGo5+2m2G22v3H56TN1SCgITCw1Ium4d9Tq5zXIhQ1oOP256BjgXcLhvKs1:kxvoTNlOP1gXcLhlZv

    Score
    1/10
    • Target

      lib/NitroxModel-Subnautica.dll

    • Size

      39KB

    • MD5

      8a87dedbe34fd9619df25b052712d6fc

    • SHA1

      1a3f7b435ccd5e670a2fd07aaec9bb43cf5d8603

    • SHA256

      f98a438b86231ee25d72eac8bc32ab0a828d8c032fbe127dc3392d1fc4785f05

    • SHA512

      8b52cf44aa6508c03e56b222597fd85451a2a40407ff2cbbeac7dae32230259f216fde874a90c5caf6cc954798aa925488560ccbf9054ee4c2da7c7e3a528424

    • SSDEEP

      768:rtfzC7NxQzMiLyrbA76h0mo4jCzOnE9EKJzgGT6lii1T8:rAuMiLyrbel4jC79P84W

    Score
    1/10
    • Target

      lib/NitroxModel.dll

    • Size

      224KB

    • MD5

      a9f052f7b1f8ca4e5ed949c881b38ec8

    • SHA1

      2c751c2214409fe911db9330d646b8e1965e2ff7

    • SHA256

      6bf03b400e80d210108f51884adc8bfa038cf4d2f17dee64e4746642684f771c

    • SHA512

      9e1371358ef8232441876bda815deb8c35276d92c9962308448a366dbf860576f4f6c84328007217448261c597593cc9185141a927fdad4b4f4e705207b9daa7

    • SSDEEP

      6144:07cBigawt7cDYF/zCAkj8G6mfOP7ibYYSXLrSm9:07c5awt7ptzCAyvOP7fn9

    Score
    1/10
    • Target

      lib/NitroxPatcher.dll

    • Size

      188KB

    • MD5

      9b43f0a00935c270799990321f762402

    • SHA1

      262c8dcf66ec0865391161d85b4b55f3e288029c

    • SHA256

      17077629958eec175053e0e596a6b3f633dc2a55db75ecd9cf18167a2fe8700c

    • SHA512

      a9c3247d90bd098d736d306cae5b29af245b70a71d6a6cfac2c292b24dc33999ee21bcd1cc73e1279f385b8a1b89339e2f6d79260a5aa6a7fbbe2d4ff340480c

    • SSDEEP

      3072:YIvkQ4HNbf7x48tolHDOMe5/F7snlkKsgfzwmCeiCffZzxfl9JF:YIiOjde5/F7IlkKfzwl2BJl

    Score
    1/10
    • Target

      lib/NitroxServer.dll

    • Size

      183KB

    • MD5

      086816218c8e75782892150d1101b2d1

    • SHA1

      93da0554715b310264e60f166cade17fa32746d0

    • SHA256

      d7ddea8c39e0393827329331c05629a3f0b33bbb25a2160afdfbb3e7f828be7e

    • SHA512

      64489d90f5e5b2cc4ea0b9a7e8277ae09a287c60f60c7b44cb22856cf87dc26eb0477d14a37804803195aff21a7f60a7c74a80a0332fc469016110c285a06f94

    • SSDEEP

      3072:JFWU8V/74sOdr4HHVmabmewRsJtMc/eYfgQYEfBbHKM4:JFWh7mKBvxt3/Z44h

    Score
    1/10
    • Target

      lib/Serilog.Sinks.Async.dll

    • Size

      9KB

    • MD5

      44feed047bde92dbd84b3c63d8296b0a

    • SHA1

      98492e2eac15898b49b37e0bc35aca6e1706298d

    • SHA256

      4b81bbdaedc06cf231f810b6eb494401c86a30eee8679db3bea2f86485b20ced

    • SHA512

      932a62c2ed84ade0de8b443f8d247d79dd2aa7c8a3652d95c680a06f789e95e019a300e5a261b143f673985c2ebed59a9815798725ff92d11107ceec0e9e426d

    • SSDEEP

      192:E8Eu3/+RsgQPwrcVvr7zk7GIKmiE47xtTxcdAC:cRsgQorcVvr7zk7Gzmo7xpxcdAC

    Score
    1/10
    • Target

      lib/Serilog.Sinks.File.dll

    • Size

      32KB

    • MD5

      c25357a7950dcfc7f85ee9d593cb1a24

    • SHA1

      6a533712852465ab3c11b5c76004312d6482f07f

    • SHA256

      5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9

    • SHA512

      30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6

    • SSDEEP

      768:0E4c3g4vuh+t/j7zAJ0eBHdDaXRrbNoihV0gZ:2ktt/Hk2eCXR9/p

    Score
    1/10

MITRE ATT&CK Matrix

Tasks