styx-x86_64-pc-windows-gnu.zip
- SHA256 2f501437e6b26f207a7ef3aa7b2a6ff8979aa395a4ffa6860d8a1cc1d3ae5320
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
styx.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
styx.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target styx-x86_64-pc-windows-gnu.zip
- Size 3.8MB
- Sample260810-plashsycph
- SHA256 2f501437e6b26f207a7ef3aa7b2a6ff8979aa395a4ffa6860d8a1cc1d3ae5320
- MD5 b9374ba779fb23a2bb69c4a19017250a
- SHA1 b55a993855bdcad5c22d1f01953e5b0675670879
- SHA512 776c316d42b7e7fc44ac6f52d02a0471806b46374653bc6909d05d5173e096449ccb51c07c18b2e67242e71ea87ac4404cf93d16c2c14c6a1d44555fc3e6d687
- SSDEEP 98304:x716ufrRqkQEvh1RH+hJO4j9+8Jxi3HUSd6IRggVIC8s9X:x19ZvZ+fp+GiU9I2TfsN
- TLSH T1D50633D1000FF5778337FE57A46CA876D436C8167A62E721B242264BBA950F98773E83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/styx.exe
File Explorer
-
styx-x86_64-pc-windows-gnu.zip.zip 3.8MB
-
styx.exe.exe 8.7MB
styx.exe
- IMPHASH ad82cb3e6556d50c0348eb4c5bf1d1d8
- SHA256 64499349b14e89f5b15e6d96048c55d5a827b7d808f53119ba629492727c2693
- MD5 f61a83260b001d22dd653e3389c7ffe9
- SHA1 f0dad16b105c967e3b9bae5e787aeadad7d3c30a
- SHA512 13acf974ec8f62bed275683b055fe371b2169f3547992e2672c63d3fca5d853956d8c7c26825d4a69e14c86325102579306d6f22745a2ab379804d43a2b40bd1
- SSDEEP 98304:35sodIabYB3JgtgHUu/lGtJu4wDAx0XV6OhXuh+Qr:+yuFD7IOhcJr
- TLSH T1EE966C43F79691ACC1AEC274434A6236FB75B8C909207EBF16E487313E65F501B2EB58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
726960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
GetUserNameW
SystemFunction036
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
bcrypt
BCryptGenRandom
kernel32
AddVectoredExceptionHandler
CancelIo
CancelIoEx
CloseHandle
ClosePseudoConsole
CompareStringOrdinal
ConnectNamedPipe
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreatePipe
CreateProcessW
CreatePseudoConsole
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
CreateWaitableTimerExW
DeleteCriticalSection
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeInfo
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetTempPathW
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSection
InitializeProcThreadAttributeList
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LockFileEx
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReadFileEx
RegisterWaitForSingleObject
RemoveDirectoryW
ResizePseudoConsole
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnmapViewOfFile
UnregisterWaitEx
UpdateProcThreadAttribute
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteFileEx
lstrlenW
__C_specific_handler
ntdll
NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
NtOpenFile
NtReadFile
NtWriteFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
ole32
CoCreateGuid
CoIncrementMTAUsage
PropVariantClear
PropVariantCopy
oleaut32
GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
VariantCopy
propsys
PropVariantCompareEx
PropVariantToBSTR
PropVariantToBoolean
PropVariantToDouble
PropVariantToInt16
PropVariantToInt32
PropVariantToInt64
PropVariantToUInt16
PropVariantToUInt32
PropVariantToUInt64
PropVariantToVariant
VariantToBoolean
VariantToDouble
VariantToInt16
VariantToInt32
VariantToInt64
VariantToPropVariant
VariantToUInt16
VariantToUInt32
VariantToUInt64
secur32
GetUserNameExW
userenv
GetUserProfileDirectoryW
ws2_32
GetHostNameW
WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSAIoctl
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendMsg
WSASendTo
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_exit
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fflush
fwrite
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wcslen
api-ms-win-crt-math-l1-1-0
__setusermatherr
pow
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
_GCC_specific_handler
_Unwind_Backtrace
_Unwind_DeleteException
_Unwind_FindEnclosingFunction
_Unwind_Find_FDE
_Unwind_ForcedUnwind
_Unwind_GetCFA
_Unwind_GetDataRelBase
_Unwind_GetGR
_Unwind_GetIP
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
unw_get_fpreg
unw_get_proc_info
unw_get_proc_name
unw_get_reg
unw_getcontext
unw_init_local
unw_is_fpreg
unw_is_signal_frame
unw_local_addr_space
unw_regname
unw_resume
unw_set_fpreg
unw_set_reg
unw_step
Name
.text
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ