Open-source atomic malware analysis

Analyze another

uix.txt

UNKNOWN
Verdict: HOSTILE
SHA256: 8cede35b80b1deaf732c2b178d908f91b3e7a0c114d06dfae9075b8a9bf78b8f · 92%
Mal-ecule
O(As₂)
Size 302.1 KB download
First seen 46 days ago
Analyzed 11 days ago

Found in 10 archives

Packed Lua loader obfuscation: public_blog_2.7.zip!uix.txt:0x0
Indexed Lua string-table reassembly: public_blog_2.7.zip!uix.txt:0x4b4ef
Packed Lua return-function loader: public_blog_2.7.zip!uix.txt:0x0
public_blog_2.7.zip!uix.txt text
1 return(function(...)return(function(z,E,A,j,r,l,Q,F,V,L,N,G,q,s,g,d,k,O,K,c,u,y,U,t)F,d,O,K,t,q,V,c,G,y,U,u,N,L,s,g,k={},function(z,E)local A=L(E)local j=function(j)return y(z,{j},E,A)end return j end,function(z,E)local A=L(E)local j=function(j,r,l,Q)return y(z,{j,r;l,Q},E,A)end return j end,-193518+(768751-575233),function()K=K+(-843160-… Packed Lua loader obfuscation
1:969 …n,K,J,Rn,Q,Fn,ln,S,m,h,wn,W,Z,zn,In,w,Pn,pn,gn,D,I,H,Qn,Xn,Hn,Un,Jn,b,k,Bn,En,an,v,P while y do if y<8480031-138744 then if y<180234+4481382 then if y<339991+(1560860-(-275750))then if y<((455388+(-638276+1368142))-612463)-(-875608-(-244264))then if y<-392229-(-1005328)then if y<440825-208089 then i… Lua state-machine comparison cluster
1:308336 …)c[z]=c[z]-(-4368-(-4369))if c[z]==470759-470759 then c[z],F[z]=nil,nil end end,function(z)local E=function(z)local y,E=z[#z],""for A=1,#y,1 do E=E..y[z[A]]end return E end for y=371474-371473,#z,-231957+(-450877+682835)do c[z[y]]=(467328+-467327)+c[z[y]]end if A then local y=A(true)local E=r(y)E.__index,E.__gc,E.__len=z,k,function()return-381188+-1549647 end return y else return j({},{[E({1,2;{"\095\095";… Packed Lua loader obfuscation

Objectives

Identity

SHA-256 8cede35b80b1deaf732c2b178d908f91b3e7a0c114d06dfae9075b8a9bf78b8f
Filename uix.txt

Origin

Source harvest

Timeline

First seen 20 Jun 2026 23:23 UTC
First analyzed 20 Jun 2026 23:25 UTC
Last analyzed 25 Jul 2026 18:05 UTC
Last updated 25 Jul 2026 18:03 UTC

Labeling

Label bad
Label source harvest