7125ceb5b229db791508993b3543fe387d55c5fe93f54cc4564af3721f2074f1

Sharing

Copy URL Twitter E-mail

General

Target
NyxClient.rar
Size 230.7MB
Sample260503-jprbsag13p
SHA256 7125ceb5b229db791508993b3543fe387d55c5fe93f54cc4564af3721f2074f1
MD5 f7dfbbe3c4421dfabbc7fc892944fd87
SHA1 65689700fe112114c56f00911df030901410242e
SHA512 f33817be955e2b5d0a18039f4bfdd8f50cbb666c905014e353d141b5ef1fc83d7fed5563ac73ecd423cfe03c26dd402d8abf76f5cb6a908b8b83211e8790ce01
SSDEEP 6291456:Fry3bJGDDlfMARTlnmDkxBrkWMCWMpzH7pp0nh:F9DvVvr3A8bp2h
TLSH
T14BB83377330C3D390D76637DE8129228B272093EA5A3C5647D5E0E5E03D2B9B276ED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/minecraftMaven/net/minecraft/minecraft-merged-c22ab19269/1.21.4-net.fabricmc.yarn.1_21_4.1.21.4+build.2-v2/minecraft-merged-c22ab19269-1.21.4-net.fabricmc.yarn.1_21_4.1.21.4+build.2-v2.jar
- Size 30.1MB
- SHA256 88e016a8c2734be1d5c699e39a44993c1dce5d0aaa801f98bdf70f09149aa7a6
- MD5 537c581a780f0468a3e185eb1902b1c6
- SHA1 8723b1b534e5b3e9b77ef968eaebce06cd927aa4
- SHA512 e6a9e894bfe0c51847697d9aabb4271fbdc7100f978936e6be4cd9981ac3486130827d49565dcbb3c4b9a3f5efe6a94719b7798f27a81ad3610ac2236d6bf3ff
- SSDEEP 786432:UbSwf3cNPZ4ArxcR0b4MZplL1sK1fzYsRrojxaiHuFKft:UTGxcRj0Ff1f8sRron
- TLSH
  T15E67AD09ABAFE644E40FAF3E40A95543E434F6BE5924A1DF212144847DF6DC03B53EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api-base/0.4.51+8ca5486f2d/fabric-api-base-0.4.51+8ca5486f2d-sources.jar
- Size 26KB
- SHA256 3a177e2c3f9d691c75dfff0f6cb19444615d56fd2ac2801aea9a970e78718a6b
- MD5 b60a447e272e3a5d88f406c3411b7bfa
- SHA1 6b36c732ba026bf6947ce73a253e1ef9306a9b30
- SHA512 066f66468b7b9a77d4d437af47cfc0a8050a7a4041109a90d1cee6053fcd6ce595fc41095d90228ea8ab967a209885677898c689e1eb4c282753ae18b94a75ca
- SSDEEP 768:zzVsuosXGUtR/ef8jIATfqYmfLpFTXTv8ectA8wjMC+pD6CviYDIP707dybCJd:13bXGUbDIAqhTTXTvNctA8Y6bviaIP7k
- TLSH
  T124C27D2ABBCA5815D107A2384AD5DB36B97C98DF1B6172C7D0051848EA0F490C7C33EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api-base/0.4.51+8ca5486f2d/fabric-api-base-0.4.51+8ca5486f2d.jar
- Size 27KB
- SHA256 654388798fd8f9cf419c7f1b6baf83ea773881398780d32507f5ed4c523da11d
- MD5 39fa96506e6463358cf77c809d5b5bb2
- SHA1 5870af68d0ed43bb8c71d45b6c4c6b7de7415e3e
- SHA512 909c24912ac48f4d294f1a705c24dd9e24e5628833cc7e47cd486787cddbbe4429d4d7115154da23c70fcad18efe31f300acc6a684c7ad8ab931c8a7bc4a47a9
- SSDEEP 768:TwjCC+p6YvqWGJnEAFSfpC/Hrre9lRyARdAJAWZww:T6+vqWGKAFSfc/OlR8AWZww
- TLSH
  T1B6D22964776B9915E507563C0F81FBB7B4FD828FAA20B0DB001618A40E5EAD0D7D2A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api-lookup-api-v1/1.6.82+7feeb7332d/fabric-api-lookup-api-v1-1.6.82+7feeb7332d-sources.jar
- Size 46KB
- SHA256 06c68748a2017e3980817614cd42ff6c4da588af95f9b8972c096944e963d228
- MD5 6a077db7b4d8794148fb98bd58e6e65e
- SHA1 c865827b9d03246e96dc38e4c9de3771dff4ec48
- SHA512 20d7bc2ff84a02e9398b1da3731565f91a2bc7136791af85aeda054c1af7f31387f6ac86c9be650c7263c83ee44074cc0b2349e30a83200e989bf2807ef079a3
- SSDEEP 768:XzVE9biGn/8HTuk9ZX7Ap7TFwf9OM8oXMR2rvghyZT9wj9C+pmU:ZwyTDce1OMlcRqWo9jg
- TLSH
  T1F5236A10BB8BA953C00B427C4AC58B3EBA3DADDB772251D74C1D944F4A4A520C7E3ADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api-lookup-api-v1/1.6.82+7feeb7332d/fabric-api-lookup-api-v1-1.6.82+7feeb7332d.jar
- Size 49KB
- SHA256 ade85b9364fa4d19683a79b1f13e9621cd721ffc5c43e6833909d41bc37b21c2
- MD5 1fe73cae80a1c686ad175e9ad4938918
- SHA1 a36c8c9975fd33171accfec35411f9b508a628ba
- SHA512 49aeeddc7e70ff0092d71ef56cc44af32779387f22be3cdb47c70701a2f6d1ea04df409592a65a102da3aaf2f35116e2d6b14ddee356dd998547d58bfe9c911a
- SSDEEP 1536:4C59wX4BjsAIzBtBYpBsBFNBXBZuB6/B5vAB2BzBiNKRdEZiTvBzBV8BMB5BPBTP:zwIBPINvMsEQT5
- TLSH
  T193337D12BB9B4C2BC60F91340EC14BBEF6799DAF5B6199E302264468CD17F04CBC7696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api/0.110.0+1.21.4/fabric-api-0.110.0+1.21.4-sources.jar
- Size 6KB
- SHA256 094e4cd78893a5e9660ef63e272b8fd54a1ad4d035a20432333d8d3a4b7d17e7
- MD5 a29e422f4b5f99302ffdaff131e286ed
- SHA1 6d1e450bf691af5311f264e9ed20a364c527056e
- SHA512 70f7884c603ea39f486e9bb3872ae0c68387752e9a612925f9f5cb6cd930fb21a455b15e5320bd0a5f841c93be185f40d0757773e741cf0c0b4c76725d69730c
- SSDEEP 192:AO77ewjwVlUr2NA4C8o23fS7NxdRcNl8iE:r+wjw4rcCffepE
- TLSH
  T1CCD13B34BF88D404C1450A3806ACAB1AF5339FCEBA71E1B74E2D34D50A058D4E996AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-api/0.110.0+1.21.4/fabric-api-0.110.0+1.21.4.jar
- Size 2.0MB
- SHA256 9fbcda16d23c7c7b31827392cdfda89bdc52a75f083e70bdf804927a755d58dc
- MD5 682f22307acb6edbf6936c8ad40a7f4f
- SHA1 bd05037c317ba1ebd0103f78aa1ae46700180781
- SHA512 b47f0965fcaf592209361b8c5ac7cbdb9c6faa0c90c86a685d4a9da181591b980c310308552f1442b03528d7a7c446d48be9537172d7f759b048680f90a511ac
- SSDEEP 49152:he5lKLjsqkwHe5ZYJOkj18l6tKDzRdmNZjKvd/dSPdNobi9yNn:oy17mYj18lp3W2vdVSFqW+
- TLSH
  T1DDA533D077A35800E29AF476E0AD739A74D19E1D2021BB959A358ECCD367F62DC83B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-biome-api-v1/15.0.2+f12498d02d/fabric-biome-api-v1-15.0.2+f12498d02d-sources.jar
- Size 53KB
- SHA256 55b3843cf315a4af767e34896762ca9cf5ada557613f75a7fae6b1fe746c75e4
- MD5 b6920b63f9ff294126dd854d859595b4
- SHA1 900399cb17b34f2cedf62453994524d266d04d9f
- SHA512 45f98d5353b6f6bc03ffbcb4b525cff82cd7afa2759093633aea01ed158907e41a170e8ff1177290e92184716fc785a06a6497877f6316f6cf6eaaca70e45360
- SSDEEP 768:5zVMvK9DRK44EC/zHmrproL2qjwT2SSfn+0pYnVgpcrpt+Bpwj8c4C+pofl5d5:LMi9DkztLjwGfn+0peqIpt+7chB5L
- TLSH
  T1CC338D61BFC6A449C44B82B5CE90CF32BE3DE45F1E2290A7E109198B5B0A414CBD67DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-biome-api-v1/15.0.2+f12498d02d/fabric-biome-api-v1-15.0.2+f12498d02d.jar
- Size 78KB
- SHA256 b363f2df3355f4e017b162b4e8c1473d11ea121b81dd37e6960a73f29c4eb9e0
- MD5 09900cecdc47f70fe605ab42b35f471a
- SHA1 511fb538b23b0f508cda380a9f267f9b10eec68c
- SHA512 62501911da4563f8336d792f97ca72f4fa9c68ca89bf45e63e7f337e5248e59ca5793f87aa3b221f9b192cac9a0ea8f77a46c6e392c46ff394550e451151b2b9
- SSDEEP 1536:dsw5iQ/s1/TvaihITuaLyc0baGWqiTSy66e3FdIvgEOtOVcwuvrTfU7:SW/eLSihITtyc0badqi+6KX6Z
- TLSH
  T1A7739E283F8B4D16E647997D88618FB7BD38C48F3B1270E725641E4E4EAE450C7C269B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-block-api-v1/1.0.29+7feeb7332d/fabric-block-api-v1-1.0.29+7feeb7332d-sources.jar
- Size 16KB
- SHA256 db691be86a663eb1418d12c0c2157c9326d8a664adb7ed89bd5c7c860a9fe432
- MD5 55084e85707a9a4881e68852e4e7458f
- SHA1 b84309bca49937594060b4207d5e696baf326d2f
- SHA512 c3b09a8b95fd29d20ac1b65324bb1124d5cb9e26382af5eab535bfbed0c967985265739a68f59199313c71942c4bb7a98fb3ee544afeda4d7ec394ab436ac0f8
- SSDEEP 384:YzVPNJ7M2jNqYgwbIEnpM+wjZDL0rcCffepKAN7:YzVPM2XFbICvwj1C+p1N7
- TLSH
  T10C723C20BBD69482D18642B84E74CF32B978EB5F1A20E1C7D15944A62D0FC50CBE67EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-block-api-v1/1.0.29+7feeb7332d/fabric-block-api-v1-1.0.29+7feeb7332d.jar
- Size 14KB
- SHA256 91e6cc4c4bcd03fefceeac79e0c7beec446927b1cd9c33524260b9be20a3529a
- MD5 ec0a7e695f262405fca074bcea52ea27
- SHA1 64f5c650658c5a8b5d34a5b317ac23ee71944260
- SHA512 17c78faa2d3deb5f9bd651e5a8508a3be7c733728d13a4e995ff35b45301b50c927b1ee35d44152d955a2de7fdce3a1f25e5a856282a3dafb628f0efa47e6c81
- SSDEEP 192:jWnTerO77ewj9Ur2NA4C8o23fS7NxdRcNl8iIOT3t4XXlrBHcD5L51yqx8E/Os3X:jWnTea+wj2rcCffepBT2XtBHmeqON92
- TLSH
  T15262A32473979897C006567C0D928EB3F5B4B84F7E30B1E7152C54694A4E864EBC2BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-block-view-api-v2/1.0.17+7feeb7332d/fabric-block-view-api-v2-1.0.17+7feeb7332d-sources.jar
- Size 22KB
- SHA256 0153f07ba413dbeb8841bd452435ae08f71d0ad5f2dd2a6e99698644a22f11a4
- MD5 6d7fa25ba39884944df848b2b8fe51f9
- SHA1 e4c31079791f2fa9288fbd31d20f742ae4f7d2ef
- SHA512 330d056b344d86d85971f08497c1220a4ce0406950b3cfbb6718dd95010236990c059d88743fd08c5743bb82f664b3ad5fceb1001670e2255d87c857d53678be
- SSDEEP 384:kmG9tvQbFr1TYLWTQDNVqE+LTt+wjWARrcCffepS/:Vu0Fr1TYLHDNVf+0wjVCC+pS/
- TLSH
  T1C1B21A28FFCBE491D85746344C808F32B8BDAD1B2621B0D3E45884995A0ED5ADBC67DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-block-view-api-v2/1.0.17+7feeb7332d/fabric-block-view-api-v2-1.0.17+7feeb7332d.jar
- Size 21KB
- SHA256 6a0d587301cf8df7bf53037d5ad2c3a1c51708202cbe4257f35c362ea54ed777
- MD5 a37fa11b1c1230d89667a0eba0bed5ce
- SHA1 d7afd83c465d99cac5e6aed6eddfb45428fae0c9
- SHA512 64641696d81f5b6d862b8f7bd067bdb43436bd68006d0e00f08bfae87aaacde839caf5957d4402f2a06f0beb27106c9e77d8f2f3fd6703d3bb2d0f4383f381cc
- SSDEEP 192:W3It+JUKpIpjgO77ewj+Ur2NA4C8o23fS7NxdRcNl8iJBIZkd6Kn2uKzlonGhpj2:qI3H+wjPrcCffepUI2/sGhdwQqj4dA
- TLSH
  T13AA2B712BF47A869C403663C1C50CE7BA6B9E85F2B62F0E7651D14584A0F854EFC27EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-blockrenderlayer-v1/2.0.5+7feeb7332d/fabric-blockrenderlayer-v1-2.0.5+7feeb7332d-sources.jar
- Size 14KB
- SHA256 97ab38c3610621a22c268a20f5b54cae173e8073dda1b4a18bfaff9e331e38b6
- MD5 b521e106be5b6ba2df38f9f0d7c50c83
- SHA1 8017208f0bfaeebec075371d665e5e9d5232e99a
- SHA512 9e1dae70599a70cf95e26f0002a45ac4abcd1d0fbe4acfe3aaeb0be306dcc9664730bb7f4f33ed8024da505b833b5149ce7c8e6723a0c10aa4cdc6c825d79dbc
- SSDEEP 192:JTP5H8QvTeuL8LRcvqvNetc4O77ewjBjsUr2NA4C8o23fS7NxdRcNl8ipqHko9t:fLARkwey+wj/rcCffep3st
- TLSH
  T154620970676E6C40C04602349E866F2DB8748CCE7A25F0C79E6D646F465E470C7EBBAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-blockrenderlayer-v1/2.0.5+7feeb7332d/fabric-blockrenderlayer-v1-2.0.5+7feeb7332d.jar
- Size 14KB
- SHA256 d61247d459b0efbc8b0b3217cb76a84ff366ac7300098f72794463e56d5a8d73
- MD5 7d07983a04ec735303a50f6d00273452
- SHA1 6872b82a4f7fec08e12a8604e013d5fcfb9fe75b
- SHA512 0bdc10a872ad8fdf87cfc66c1b69dd9400a00cc416d3611114ba9c24ff19718833f820f7dc27f9827c2b9c73dfa5f1195c51babbd669d25defeeeb5251e1d2e2
- SSDEEP 384:55wLVnx+wjnrcCffep2G4DxKmAA9oy2Lkn+:5+GwjoC+pIDNiLkn+
- TLSH
  T14E62C720BFB95C40C41B56354D899F7EFCB5C84E5E26F5DF2608692E090E820CBC766E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  NyxClient/NyxClient/NyxClient/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_4_1_21_4_build_2_v2/net/fabricmc/fabric-api/fabric-client-tags-api-v1/1.1.25+7feeb7332d/fabric-client-tags-api-v1-1.1.25+7feeb7332d-sources.jar
- Size 14KB
- SHA256 4cc780395e6aeb80d1543bbfffd5e61264193a19579e33d502b25183910c6bb9
- MD5 27549b1f570bee2a207b1f659809fc84
- SHA1 e734160ff0a2a8cfb42c588027866b2c06199d0c
- SHA512 6934d5c58bec3b297e9d9bdce5fabed20aa983ca7190e2b74107219b581e8de480ff84c80ba276d1d5d5fd8d4bb6496cd92001d88d4c29dedb91bb31aea3f682
- SSDEEP 192:H/T3SiL+3DNgDxNllAqDt8Xstg7iO77ewjgcUr2NA4C8o23fS7NxdRcNl8i0cQl7:HuD3BgTHAqZ8Xst++wjOrcCffepLQZ
- TLSH
  T161622B24739E7C20E44A423C0BE19B3FB935BC2A976352D3195D144E4A4F990C7EA6AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32