Overview
overview
3Static
static
3lib/Micros...ck.dll
windows7-x64
1lib/Micros...ck.dll
windows10-2004-x64
1lib/Mono.C...db.dll
windows7-x64
1lib/Mono.C...db.dll
windows10-2004-x64
1lib/Mono.C...db.dll
windows7-x64
1lib/Mono.C...db.dll
windows10-2004-x64
1lib/Mono.C...ks.dll
windows7-x64
1lib/Mono.C...ks.dll
windows10-2004-x64
1lib/Mono.Cecil.dll
windows7-x64
1lib/Mono.Cecil.dll
windows10-2004-x64
1lib/Mono.Nat.dll
windows7-x64
1lib/Mono.Nat.dll
windows10-2004-x64
1lib/MonoMo...ur.dll
windows7-x64
1lib/MonoMo...ur.dll
windows10-2004-x64
1lib/MonoMod.Utils.dll
windows7-x64
1lib/MonoMod.Utils.dll
windows10-2004-x64
1lib/Newton...on.dll
windows7-x64
1lib/Newton...on.dll
windows10-2004-x64
1lib/NitroxClient.dll
windows7-x64
1lib/NitroxClient.dll
windows10-2004-x64
1lib/Nitrox...ca.dll
windows7-x64
1lib/Nitrox...ca.dll
windows10-2004-x64
1lib/NitroxModel.dll
windows7-x64
1lib/NitroxModel.dll
windows10-2004-x64
1lib/NitroxPatcher.dll
windows7-x64
1lib/NitroxPatcher.dll
windows10-2004-x64
1lib/NitroxServer.dll
windows7-x64
1lib/NitroxServer.dll
windows10-2004-x64
1lib/Serilo...nc.dll
windows7-x64
1lib/Serilo...nc.dll
windows10-2004-x64
1lib/Serilo...le.dll
windows7-x64
1lib/Serilo...le.dll
windows10-2004-x64
1General
-
Target
Nitrox_1.7.1.0.zip
-
Size
7.8MB
-
Sample
241010-tbtvvstdkb
-
MD5
f7d25be0395feec244bc865acfa07043
-
SHA1
b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d
-
SHA256
92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a
-
SHA512
8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29
-
SSDEEP
196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF
Static task
static1
Behavioral task
behavioral1
Sample
lib/Microsoft.WindowsAPICodePack.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
lib/Microsoft.WindowsAPICodePack.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
lib/Mono.Cecil.Mdb.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
lib/Mono.Cecil.Mdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
lib/Mono.Cecil.Pdb.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
lib/Mono.Cecil.Pdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
lib/Mono.Cecil.Rocks.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
lib/Mono.Cecil.Rocks.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
lib/Mono.Cecil.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
lib/Mono.Cecil.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
lib/Mono.Nat.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
lib/Mono.Nat.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
lib/MonoMod.RuntimeDetour.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
lib/MonoMod.RuntimeDetour.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
lib/MonoMod.Utils.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
lib/MonoMod.Utils.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
lib/Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
lib/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
lib/NitroxClient.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
lib/NitroxClient.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
lib/NitroxModel-Subnautica.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
lib/NitroxModel-Subnautica.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
lib/NitroxModel.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
lib/NitroxModel.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
lib/NitroxPatcher.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
lib/NitroxPatcher.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
lib/NitroxServer.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
lib/NitroxServer.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
lib/Serilog.Sinks.Async.dll
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
lib/Serilog.Sinks.Async.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
lib/Serilog.Sinks.File.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
lib/Serilog.Sinks.File.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
lib/Microsoft.WindowsAPICodePack.dll
-
Size
102KB
-
MD5
9531b41519156855a45c46f0b379a784
-
SHA1
00b857f09dcf0c71dab40c1a8c4c54d411fdb197
-
SHA256
418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0
-
SHA512
10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0
-
SSDEEP
3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ
Score1/10 -
-
-
Target
lib/Mono.Cecil.Mdb.dll
-
Size
42KB
-
MD5
1c6aca0f1b1fa1661fc1e43c79334f7c
-
SHA1
ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
-
SHA256
411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
-
SHA512
1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
-
SSDEEP
768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
Score1/10 -
-
-
Target
lib/Mono.Cecil.Pdb.dll
-
Size
87KB
-
MD5
6d5eb860c2be5dbeb470e7d3f3e7dda4
-
SHA1
80c76660b87c52127b1a7da48e27700f75362041
-
SHA256
447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4
-
SHA512
64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5
-
SSDEEP
1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO
Score1/10 -
-
-
Target
lib/Mono.Cecil.Rocks.dll
-
Size
27KB
-
MD5
6e7f0f4fff6c49e3f66127c23b7f1a53
-
SHA1
14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a
-
SHA256
2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e
-
SHA512
0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e
-
SSDEEP
384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd
Score1/10 -
-
-
Target
lib/Mono.Cecil.dll
-
Size
350KB
-
MD5
de69bb29d6a9dfb615a90df3580d63b1
-
SHA1
74446b4dcc146ce61e5216bf7efac186adf7849b
-
SHA256
f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc
-
SHA512
6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015
-
SSDEEP
6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD
Score1/10 -
-
-
Target
lib/Mono.Nat.dll
-
Size
67KB
-
MD5
05164f22c0b8a36ef01309e78d07b241
-
SHA1
618c2ea99a0994cf61fcd53d03f5d309fcf7dc4e
-
SHA256
1119d22cb1ecf7c402a6893cfdfb92c66340d80cb7791f33c3502f8932284b81
-
SHA512
63991123b116be8bac9ef7ce1c2913dcc8aa966679215506994cf7d6f2d43f22aa6fc0243759a01c8904e3e6a374bef37666df78a1631d3894eafa4a3c638678
-
SSDEEP
1536:s2CjOAhap6ntQDOx5622PAZVyJu7TZs6/JugDsb61Xy:s2DS769zwXZs6/K8C
Score1/10 -
-
-
Target
lib/MonoMod.RuntimeDetour.dll
-
Size
106KB
-
MD5
eb49f0b61a7c53d369d9ed0cdb37b03b
-
SHA1
7500629e55c5285954423d0701f5e3d6c4d7e98c
-
SHA256
ad262f74b7c71350b95f2b222f281d5f013a15811b8b6f1eda4404f209c5ed15
-
SHA512
a40de9c13a3ccf45d743572c44379e1fbfb670a2cd674b1b2d88a0875117ee4f6a79ffcf9d61ed0971e0df7d608eea399f2fd87a987e20e5d2a773f6ad745824
-
SSDEEP
3072:7HxL1bMURv+pM5HHWsaYlG58zAveC2pZ:7tOUw25H2RYlI8zAvu
Score1/10 -
-
-
Target
lib/MonoMod.Utils.dll
-
Size
191KB
-
MD5
4eb70dea0151b4fa6205fe90e3cd0d08
-
SHA1
a39c9692ae2a58cf985d23369fd7f292b168ff12
-
SHA256
0ae1ffbd5e761f88c723d34581ddc1ab93c622ba2f5c938c42fb639da405e113
-
SHA512
537846b97ef7df829acbe93aa7dc08910a45a2d50022dfda239e6ce7326323735371b82013cb72c59801b69727975f211f8b97ba8a1d979c13a3c6a85275172f
-
SSDEEP
3072:vdL+ydm5dPMsWWVm24ij8QCkMrCvv9vLhBhZk9TuT1eylmseFJuh:B6mshbj8Q/vlPkeRKJu
Score1/10 -
-
-
Target
lib/Newtonsoft.Json.dll
-
Size
683KB
-
MD5
6815034209687816d8cf401877ec8133
-
SHA1
1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
-
SHA256
7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
-
SHA512
3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
-
SSDEEP
12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
Score1/10 -
-
-
Target
lib/NitroxClient.dll
-
Size
520KB
-
MD5
ddfae289d082d6f45199ae1fec630d83
-
SHA1
31b1d96c005835dc6200d1bd7b5a8b6daa75e07c
-
SHA256
2709adf96cc05dfe6224dc4be96212f13e5692468da8c9772c3aa9b05a1d34ca
-
SHA512
28269614b5ac22ecd97d34882ab1898ecf16915cb035815983c1bba63cc3853203a23c61b5f5c9e1bfafb87ac347bf3e535029753925edf9e2a21db481f73944
-
SSDEEP
12288:+8qDxEGo5+2m2G22v3H56TN1SCgITCw1Ium4d9Tq5zXIhQ1oOP256BjgXcLhvKs1:kxvoTNlOP1gXcLhlZv
Score1/10 -
-
-
Target
lib/NitroxModel-Subnautica.dll
-
Size
39KB
-
MD5
8a87dedbe34fd9619df25b052712d6fc
-
SHA1
1a3f7b435ccd5e670a2fd07aaec9bb43cf5d8603
-
SHA256
f98a438b86231ee25d72eac8bc32ab0a828d8c032fbe127dc3392d1fc4785f05
-
SHA512
8b52cf44aa6508c03e56b222597fd85451a2a40407ff2cbbeac7dae32230259f216fde874a90c5caf6cc954798aa925488560ccbf9054ee4c2da7c7e3a528424
-
SSDEEP
768:rtfzC7NxQzMiLyrbA76h0mo4jCzOnE9EKJzgGT6lii1T8:rAuMiLyrbel4jC79P84W
Score1/10 -
-
-
Target
lib/NitroxModel.dll
-
Size
224KB
-
MD5
a9f052f7b1f8ca4e5ed949c881b38ec8
-
SHA1
2c751c2214409fe911db9330d646b8e1965e2ff7
-
SHA256
6bf03b400e80d210108f51884adc8bfa038cf4d2f17dee64e4746642684f771c
-
SHA512
9e1371358ef8232441876bda815deb8c35276d92c9962308448a366dbf860576f4f6c84328007217448261c597593cc9185141a927fdad4b4f4e705207b9daa7
-
SSDEEP
6144:07cBigawt7cDYF/zCAkj8G6mfOP7ibYYSXLrSm9:07c5awt7ptzCAyvOP7fn9
Score1/10 -
-
-
Target
lib/NitroxPatcher.dll
-
Size
188KB
-
MD5
9b43f0a00935c270799990321f762402
-
SHA1
262c8dcf66ec0865391161d85b4b55f3e288029c
-
SHA256
17077629958eec175053e0e596a6b3f633dc2a55db75ecd9cf18167a2fe8700c
-
SHA512
a9c3247d90bd098d736d306cae5b29af245b70a71d6a6cfac2c292b24dc33999ee21bcd1cc73e1279f385b8a1b89339e2f6d79260a5aa6a7fbbe2d4ff340480c
-
SSDEEP
3072:YIvkQ4HNbf7x48tolHDOMe5/F7snlkKsgfzwmCeiCffZzxfl9JF:YIiOjde5/F7IlkKfzwl2BJl
Score1/10 -
-
-
Target
lib/NitroxServer.dll
-
Size
183KB
-
MD5
086816218c8e75782892150d1101b2d1
-
SHA1
93da0554715b310264e60f166cade17fa32746d0
-
SHA256
d7ddea8c39e0393827329331c05629a3f0b33bbb25a2160afdfbb3e7f828be7e
-
SHA512
64489d90f5e5b2cc4ea0b9a7e8277ae09a287c60f60c7b44cb22856cf87dc26eb0477d14a37804803195aff21a7f60a7c74a80a0332fc469016110c285a06f94
-
SSDEEP
3072:JFWU8V/74sOdr4HHVmabmewRsJtMc/eYfgQYEfBbHKM4:JFWh7mKBvxt3/Z44h
Score1/10 -
-
-
Target
lib/Serilog.Sinks.Async.dll
-
Size
9KB
-
MD5
44feed047bde92dbd84b3c63d8296b0a
-
SHA1
98492e2eac15898b49b37e0bc35aca6e1706298d
-
SHA256
4b81bbdaedc06cf231f810b6eb494401c86a30eee8679db3bea2f86485b20ced
-
SHA512
932a62c2ed84ade0de8b443f8d247d79dd2aa7c8a3652d95c680a06f789e95e019a300e5a261b143f673985c2ebed59a9815798725ff92d11107ceec0e9e426d
-
SSDEEP
192:E8Eu3/+RsgQPwrcVvr7zk7GIKmiE47xtTxcdAC:cRsgQorcVvr7zk7Gzmo7xpxcdAC
Score1/10 -
-
-
Target
lib/Serilog.Sinks.File.dll
-
Size
32KB
-
MD5
c25357a7950dcfc7f85ee9d593cb1a24
-
SHA1
6a533712852465ab3c11b5c76004312d6482f07f
-
SHA256
5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
-
SHA512
30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6
-
SSDEEP
768:0E4c3g4vuh+t/j7zAJ0eBHdDaXRrbNoihV0gZ:2ktt/Hk2eCXR9/p
Score1/10 -