99938cf62433e7e9ff43f770a167bf671ab58c013b116d2f12e17c6d426fe206 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

noxus36/OpenAL32.dll

windows10-2004-x64

3

noxus36/OpenAL32.dll

windows11-ltsc_2024-x64

3

noxus36/SDL2.dll

windows10-2004-x64

3

noxus36/SDL2.dll

windows11-ltsc_2024-x64

3

noxus36/Steam.dll

windows10-2004-x64

3

noxus36/Steam.dll

windows11-ltsc_2024-x64

3

noxus36/libspeex.dll

windows10-2004-x64

3

noxus36/libspeex.dll

windows11-ltsc_2024-x64

3

noxus36/li...sp.dll

windows10-2004-x64

3

noxus36/li...sp.dll

windows11-ltsc_2024-x64

3

noxus36/li...api.so

ubuntu-18.04-amd64

1

noxus36/steam_api.dll

windows10-2004-x64

3

noxus36/steam_api.dll

windows11-ltsc_2024-x64

3

noxus36/subrosa.exe

windows10-2004-x64

3

noxus36/subrosa.exe

windows11-ltsc_2024-x64

3

noxus36/su...ed.exe

windows10-2004-x64

3

noxus36/su...ed.exe

windows11-ltsc_2024-x64

3

noxus36/su...ed.x64

ubuntu-18.04-amd64

3

noxus36/wrap_oal.dll

windows10-2004-x64

3

noxus36/wrap_oal.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
noxus36.zip
Size 47.1MB
Sample260730-12hzlsgd45
SHA256 99938cf62433e7e9ff43f770a167bf671ab58c013b116d2f12e17c6d426fe206
MD5 e0e537e4b554b049f1f26c972c35b66b
SHA1 a4f684a2fe2e40e339b4b2501f2884e50f183bef
SHA512 f8a533a53f453eb5b73311138b31ecd40ba08c21d34937c3f43d21ebe31374730e4047a65dd9a8bf628299bd70378b632df0413c06b58806038f7e0cba6fc99d
SSDEEP 786432:GK2xEGtTQpj3nBk2sot/JMBEhBLeAW/6/WQuCxrE+IzHR03hZ0xB0Qu0XksPY/e1:5I5k+2sIhMuhBLeA1IrAhZ0/0P0XF5+a
TLSH
T14AB7337BF16C42BDEA8BBB74138B434AE1D968697E39E7D684B6D0A10C5B7405F01383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery linux

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

noxus36/OpenAL32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

noxus36/OpenAL32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

noxus36/SDL2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

noxus36/SDL2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

noxus36/Steam.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

noxus36/Steam.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

noxus36/libspeex.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

noxus36/libspeex.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

noxus36/libspeexdsp.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

noxus36/libspeexdsp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

noxus36/libsteam_api.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

noxus36/steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

noxus36/steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

noxus36/subrosa.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

noxus36/subrosa.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

noxus36/subrosadedicated.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

noxus36/subrosadedicated.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

noxus36/subrosadedicated.x64

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

noxus36/wrap_oal.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

noxus36/wrap_oal.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  noxus36/OpenAL32.dll
- Size 112KB
- SHA256 eb2d0aedb5d25e6ea5732623347d6406bc8789dc8ee15b89a07fd9406aa576df
- MD5 f961a671738ee369c96abcf8bde9a613
- SHA1 c16010b8e2b902fe40ad359a57472268ab5c5c88
- SHA512 407818a5cd40e556a07ac27999addd6f36fa7ccdb7b7821caefd82bf7530ad063111ba5400cc8fbc7d9397f6c48fff1a97a0c3d6f0340eba22edffe0020fdb27
- SSDEEP 1536:lnn+ow0U2+TEBPj0rJIaiuMB4Gsny23g/tLv4mG8Sz5Guedc:lnbw0U5EBUA14mG8Sz5Guedc
- TLSH
  T176B36B26384180B6E04B0A7D40556B61ABBF1D937F96CDCBEB341EC86EA02D5853F3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  noxus36/SDL2.dll
- Size 1023KB
- SHA256 bf534ad47a353bd6f63baf75bc45b88ebfcabeb48b9451cdffbe987bc63e302f
- MD5 4cd9e9a5efad4cceb01b3e41a047e489
- SHA1 c7912bc20ff09be438f3a481c16d7dff2400651e
- SHA512 9e4b9097dc2035fbb0d101bb12432b86f68220dae1892fee52b8ee74d63bcf6d0af59e3cd80c1a63261b8d179d44c3ec01cc007b5b8ff269b8544f2b12947466
- SSDEEP 24576:tcuxlv9Sawdo1bSRlJ931BY1gTNlt3CIXFVVjm5xh7pcPwQ5n+t+eO6eJ9eOFwAZ:9lv9S/jm5xdpIwwn+VzMyWyG
- TLSH
  T1C4255C89FBC798F1FC5718B18143F7BF4B2163018425CDF1F4A85E89E923A62356A369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  noxus36/Steam.dll
- Size 2.7MB
- SHA256 e7f73119317e8d6ec6b54c19f1be58973fa64dc3fa78bb955bf534cfe52ddf0d
- MD5 f0f304f652912165a24968232a8cd151
- SHA1 df81c88ef28ac0dfac297164c1db67fe61ca931d
- SHA512 aaeff7babdcce27fdf281b004b1e7e340884b5af1c6d8f0b2c0716a7c7e9bac86aed64cf6a18746f34568ef7ca7d14e6691986ad446f4d42453a6b5176f2292d
- SSDEEP 24576:FPAKW7hatcrEKpk66bVdWSSNsqrVcX3xctRRQ3+7NJ6u1vokNMlQzvbehQP26nuY:2Z7oysKNmQzxEGQcFJYoCQTDpTNl+WA6
- TLSH
  T158D57C10FBEAC077CE8354B008ADD70F5A6A66481B946BD3F39C2F8F19B11C1693659B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  noxus36/libspeex.dll
- Size 166KB
- SHA256 65a9bbd5b3b9161c0dd61a9e185e391cfa68f31171e1a5fcfad20bcc9eb09480
- MD5 e10db82c997a756a01b6f954e86b83e0
- SHA1 411fca36d8639b0ba78d8b3cfe1421626a33e6b4
- SHA512 ad3915a619e139a39d9587975f20374852255437fbb31621be94252794beb553ac710ce5fd15ea562be753788c47ff49babd7f5361cb4665e748c8aada01ac8b
- SSDEEP 3072:q+DjAzyw7pIzyli1LlyV02NpvP+Nze/5HiZ9LFAg0FuCDircB:tAz9pSAxHkAO
- TLSH
  T18BF38E41B2F3C9F5E43A287C34493AD7A726634487A4C4F79FF44E49DE911E085FA2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  noxus36/libspeexdsp.dll
- Size 153KB
- SHA256 f15b0408096eafc700fe069b716ffa921854b4e95bed33ad08524a59cc8ad57b
- MD5 9a8608bb0b654c650743221914d87ac2
- SHA1 bc4dde9361fe4170a93e6e9af80cb8a2aaf70f66
- SHA512 ceac4b5b61528832eedfc98c050fda907df88ad9ad342257c2fb2e15d8e185cc1b7f73e0c773950b7a63a5266c900d3ada4d96a2135fa2b791b4577e0f27258f
- SSDEEP 3072:YpNwO4cRWdvPsDnhjefTshyKYRq9oedhzzZFAbENqFu44Ag0FuKDH:YH4cROsLt2xedhPZqkAO
- TLSH
  T170E37C8075F3C6F6C47E103C505D365B6E3B634543688AF76BF10A8ADEE1A908DF92A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  noxus36/libsteam_api.so
- Size 80KB
- SHA256 988cd7191c5d38a6e71a2b2f7322d44a088c5d6922141a30217af4fb43372259
- MD5 c865aa19a5b11331ff4c7fe1837f4145
- SHA1 b1c7d8f0734326fe302f42df303e191ebb403548
- SHA512 6a2974c4ec4bc5fe82404901f41c1c1fc7b8760a754900cb695da56c5a4c7d3023a69e7610945a9e03cc0f434121dc5dc0138c0d73ee539bbdbf1c49d46a3390
- SSDEEP 1536:VB+wUmts1CBEKYq2Bx+bm9UNaNROJ8DuO8NIrCgO7KX+eoKNf:v+wUmtoIYq2npk+ROGuO8gg7EZocf
- TLSH
  T114834A07B564997DC0F0C270CACBC533A6B179E682366E9F344463292D46B6D1F2FA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  noxus36/steam_api.dll
- Size 186KB
- SHA256 3648e216ecf0c6a474b07e79d39394911bfb9b5c85a52c20886aec1e9709f82d
- MD5 1bc418e43146805432032d8657eefd67
- SHA1 792d166f48a2de1cb780e147a916b983f750b44f
- SHA512 9c25db4d59549103da7e9a2b0f8218d59e392b999a0b709a1eb9bc2a40567dc2fb2d5a7d6906e01c7a8f73075e1fd6f36139cadd4e44f7d1eb0121e0366df0ea
- SSDEEP 3072:YL2ATjapJIzKfwesWqFOhH8Z+woZICZfyDfaSmj2f7:22A3aJu6SCQm2j
- TLSH
  T100144A3539E091B1EAB7C13586A4CE1B7AB9367737341DFF7788066588221C26B33693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  noxus36/subrosa.exe
- Size 2.0MB
- SHA256 8ce80ff4a89ed0f3811f6f6b98d867596d49292c1dee0e4669e0c624b55a0dcf
- MD5 8f781a1b1e254fada9d13422fd20b24d
- SHA1 d03567e68e1ba1821dda99af895e1f83c08ed33b
- SHA512 eb0eed6d5075e07e67fba461b2f53dc0327eb8880eefca1ea85a0fdda0439834db05cfcda2a2a8a1c0b65a423a021f0bdbe5a0f148f8afe44fb79e2330f81332
- SSDEEP 49152:g1FlVd1JPgcMmV2aGjcSPnTEy+tp61/Gk9Ebf2kf0:SFl71JPXMmLGjcSPnOD6Ik9EbfJ0
- TLSH
  T100A59E00C096A072E59D28BCD087731A46280FA5473DD5CB7FFA2E94DE24EFC95B674A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  noxus36/subrosadedicated.exe
- Size 962KB
- SHA256 4a69bc72de93cd10f8d9bf368fd67cffb80048066bfeb05d82931583ad1e6492
- MD5 42ec04ed2d04a0b18591407168785056
- SHA1 2ddde735e94fba88636e1255f27969cdf2fa02fa
- SHA512 aeae4eb7971b9e72ddae7380e751308eee8816e96b9ddbaadeb565b20ba3cc2940d7a5a96941b01a3788897aebced18005a6f3a74b55328c5494ecda3b992ed3
- SSDEEP 12288:SuVvpp3x/4Cl5lWV5Mvqll9GmSIqtcqw7bLk0SrE7XB:S8vppxgHV5MvqJGmSIqcqobLk0SyB
- TLSH
  T15D257C51F297B160D8DD2CFC91463B19A4140FA54738B2C7BFFA2EE61E18DDC68B4682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  noxus36/subrosadedicated.x64
- Size 765KB
- SHA256 d511ba924f48c47fb8a476dd8cfc04678b803bffef7a908c6e25db2496de5fc0
- MD5 6c4258b17fc1612c901bda78a7103393
- SHA1 810310668277c921104b5ae19c30c6ed94b27ef1
- SHA512 ed7b3d0e89b6be9a8006b801b308228ce5c59004285d762c9f877aa2e49cd439a71be58785001a0c18da00f16e2365ead2367c883ff06ee79e182e0e1bd449a4
- SSDEEP 12288:9M1Q3EtGCN3j8BwZa4DkGo51dAE+yrAtkniTjx87T3tZj7uWdH6znEk7:9M9N3IaZa4wGo5T+WAtNxGj7tnk7
- TLSH
  T150F42981F1F3C0E8D219B870B1A9F56BF93634840D1D997777F89A205EF6E104ECAA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  noxus36/wrap_oal.dll
- Size 400KB
- SHA256 c1d059f843a9949b4bab0c281894ece5dbd088c39c9d6a4480782cde4284a42d
- MD5 6ded3e81d8524f8d466a6a8c5273d0de
- SHA1 4851b95e7467cdef9f4665d9fcbfbfdfea795b79
- SHA512 4b927b6c63ae5a28859c7055fb60eb23e96eb0624e90901f386af5560e29d79c55ef7a7b0480945b066f25cd72ad6d7b304c5c2cfabe2c2ad4478ad0327b7749
- SSDEEP 6144:RcdvlV+kZmZlHr3g/BoQw9RZd64xCQTv4wVAObO2JlG:Rv7gBgZd5x3TgwVcAG
- TLSH
  T1DE94AE42FA91C0F3C49E447814B3975E6A784B2113BEE9F3FFF00D5A9E646E46836249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy