Astryx[.]exe | Triage™

Resubmissions

15/07/2026, 03:43

260715-eae8raa13j5

15/07/2026, 03:40

260715-d7673aaz9m5

15/07/2026, 03:35

260715-d5ep2ady4s5

Sharing

Copy URL Twitter E-mail

General

Target
Astryx.exe
Size 3.0MB
Sample260715-eae8raa13j
SHA256 e410bc728058c2b397bec7d680b3cd44e9bcb8620c01ec0fdc24c367072a7feb
MD5 0721230db148489d15bae00db8a2018e
SHA1 7b1336ff9a0bffa05bb4b771ce755df83c839399
SHA512 07174197ad4d170da2e7591102357f1d00f0568b2b27b1defb240b973a7e3ef7605007f99d53af7410bcbcfea02b109f8f9bd54b7dea8ef468cb26c312953d8e
SSDEEP 49152:4To4GE1oWJ/WplBbYJcb/ajeIJBy+pb6aSPrE9AUwVzd2sxT:uoEAzSj7rv6aSPg9AnVz
TLSH
T1CDE59F12B65B3898C11AC4B28A465A577E2034C90BA3FFEB7598D53A2F71BF00E3D715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Astryx.exe

File Explorer

Astryx.exe

.exe 3.0MB

Astryx.exe

IMPHASH 10502219c77e91f05a3417d454b5895d
SHA256 e410bc728058c2b397bec7d680b3cd44e9bcb8620c01ec0fdc24c367072a7feb
MD5 0721230db148489d15bae00db8a2018e
SHA1 7b1336ff9a0bffa05bb4b771ce755df83c839399
SHA512 07174197ad4d170da2e7591102357f1d00f0568b2b27b1defb240b973a7e3ef7605007f99d53af7410bcbcfea02b109f8f9bd54b7dea8ef468cb26c312953d8e
SSDEEP 49152:4To4GE1oWJ/WplBbYJcb/ajeIJBy+pb6aSPrE9AUwVzd2sxT:uoEAzSj7rv6aSPg9AnVz
TLSH
T1CDE59F12B65B3898C11AC4B28A465A577E2034C90BA3FFEB7598D53A2F71BF00E3D715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1598192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AcquireSRWLockExclusive CloseHandle CreateDirectoryA CreateFileA CreateFileW CreatePipe CreateProcessA CreateRemoteThread CreateThread CreateToolhelp32Snapshot DecodePointer DeleteCriticalSection DeleteFileA DeleteFileW EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameA GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesA GetFileSizeEx GetFileType GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTime GetSystemTimeAsFileTime GetTempFileNameA GetTempPathA GetTempPathW GetThreadContext GetTickCount GetUserDefaultLCID GetVolumeInformationA GetWindowsDirectoryA GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale K32EnumProcessModulesEx K32GetModuleFileNameExA LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LocalFree Module32FirstW Module32NextW MoveFileA MultiByteToWideChar OpenProcess OutputDebugStringA Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency QueueUserWorkItem RaiseException ReadConsoleW ReadFile ReadProcessMemory ReleaseSRWLockExclusive SearchPathA SetEndOfFile SetFilePointerEx SetHandleInformation SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess UnhandledExceptionFilter VirtualAlloc VirtualAllocEx VirtualFreeEx VirtualProtect VirtualQueryEx WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory

user32

ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard GetCapture GetClientRect GetClipboardData GetCursorPos GetForegroundWindow GetKeyState GetKeyboardLayout GetMessageExtraInfo GetSystemMetrics GetWindowRect IsWindowUnicode LoadCursorW LoadImageW MessageBoxA OpenClipboard PeekMessageW PostQuitMessage RegisterClassExW ReleaseCapture ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetWindowPos ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW UpdateWindow

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDestroyHash BCryptFinishHash BCryptGenRandom BCryptHashData BCryptOpenAlgorithmProvider

advapi32

GetUserNameA SetEntriesInAclA SetSecurityInfo

shell32

SHGetFolderPathA ShellExecuteA ShellExecuteW

ws2_32

WSACleanup WSAGetLastError WSAStartup closesocket connect freeaddrinfo getaddrinfo recv send setsockopt socket

secur32

AcquireCredentialsHandleA DecryptMessage DeleteSecurityContext EncryptMessage FreeContextBuffer FreeCredentialsHandle InitializeSecurityContextA QueryContextAttributesA

crypt32

CryptBinaryToStringA

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

45KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

45B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

472B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Astryx.exe

kernel32

user32

bcrypt

advapi32

shell32

ws2_32

secur32

crypt32

imm32

d3dcompiler_47

ntdll

generic