e9bb40784ab768f60615dd0305c04ffdbf551c3932be5690f80b28b39cef9077

General

Target
Desyx.exe
Size 71.2MB
Sample260828-p16thaxhpb
SHA256 e9bb40784ab768f60615dd0305c04ffdbf551c3932be5690f80b28b39cef9077
MD5 a48fddd03968aa5b728b36a816e6653a
SHA1 70766c725c576601c8da4837ead41f8c631b2c34
SHA512 55542b9f2fbfd0b3cc09c1fc3af97fbc35a9df43830c3b6bf4a1d38baaef356bd55a7a9f507acc083710a13f5ce953266a91fe5db1abe2fd6b1768f69ab4e0e8
SSDEEP 1572864:IuTIACf+vWlM9ojCrD4WWJvKSc/JUNnenrW10oZbDq5cNvvQ:IuI2elKbDSc/iFeny13ez
TLSH
T1EEF733495F406C9AFD0CC1769BD14E46D566BC2D2D828ECA13E40A752EA37CCC9AEF31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Desyx.exe
- Size 71.2MB
- SHA256 e9bb40784ab768f60615dd0305c04ffdbf551c3932be5690f80b28b39cef9077
- MD5 a48fddd03968aa5b728b36a816e6653a
- SHA1 70766c725c576601c8da4837ead41f8c631b2c34
- SHA512 55542b9f2fbfd0b3cc09c1fc3af97fbc35a9df43830c3b6bf4a1d38baaef356bd55a7a9f507acc083710a13f5ce953266a91fe5db1abe2fd6b1768f69ab4e0e8
- SSDEEP 1572864:IuTIACf+vWlM9ojCrD4WWJvKSc/JUNnenrW10oZbDq5cNvvQ:IuI2elKbDSc/iFeny13ez
- TLSH
  T1EEF733495F406C9AFD0CC1769BD14E46D566BC2D2D828ECA13E40A752EA37CCC9AEF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  autoclicker.pyc
- Size 331KB
- SHA256 e7851d2ac9d6cd2c23ba416a97b0b2d224af9bbaf9e5c911aed9bbdf443187ff
- MD5 030638faccbeabd24239c99f34b85f51
- SHA1 288f7c949aed66f48ad91cd64e666cd565eb2733
- SHA512 d0422520244707fec28179b3801b02009b840cf27c4c44346b6be7be277d0d5b3c6d5da8ae2146214fc4a19a6d13f9661fc9058d6e731548a2e7bf35420faab9
- SSDEEP 3072:rQDxuFLiqZNgw9EwEmc2baJBrZ2QS7Nbek5sJ0KbmFBjBevlU5s/V3pB9OSqLsSF:rMuBiup7EsaJBqgqxjBIDXOTOmzLZt
- TLSH
  T1B074F8B5B870E96BDCAD727931D3A940A33291467220CB07E2345DBE3CED655CE9630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution persistence privilege_escalation adware ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Downloads MZ/PE file
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4