Overview
overview
7Static
static
3GalaxyDesk...64.exe
windows10-2004-x64
7GalaxyDesk...64.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3codespace-...ve.exe
windows10-2004-x64
6codespace-...ve.exe
windows11-ltsc_2024-x64
6runtime/pa...ne.exe
windows10-2004-x64
1runtime/pa...ne.exe
windows11-ltsc_2024-x64
1runtime/pa...ox.svg
windows10-2004-x64
3runtime/pa...ox.svg
windows11-ltsc_2024-x64
4runtime/pa...ox.svg
windows10-2004-x64
3runtime/pa...ox.svg
windows11-ltsc_2024-x64
4runtime/pa...ve.svg
windows10-2004-x64
3runtime/pa...ve.svg
windows11-ltsc_2024-x64
4runtime/pa...ve.svg
windows10-2004-x64
3runtime/pa...ve.svg
windows11-ltsc_2024-x64
4runtime/pa...re.svg
windows10-2004-x64
3runtime/pa...re.svg
windows11-ltsc_2024-x64
4runtime/pa...et.svg
windows10-2004-x64
3runtime/pa...et.svg
windows11-ltsc_2024-x64
4runtime/pa...ub.svg
windows10-2004-x64
3runtime/pa...ub.svg
windows11-ltsc_2024-x64
4runtime/pa...ab.svg
windows10-2004-x64
3runtime/pa...ab.svg
windows11-ltsc_2024-x64
4General
- Target GalaxyDesk-0.9.0-win-x64.exe
- Size 32.3MB
- Sample261001-phyp6sbf37
- SHA256 519c6fdf7f8109bf03d42e309a8bcf9788bb5672602dc36efe6c4876f58e684e
- MD5 1e61950e6ee2f32a972644cca3cd46c3
- SHA1 ed343dafcb25fd25fe42925c888ac8da91eb1aee
- SHA512 317b8a11eeefd9dd8935bf44ac92e0295d31b17c949cb91c20e339c891002f64b04f61ef3678811a47b70986c38252d2bade6fb3865fabd7e92b96f22f55a3a0
- SSDEEP 786432:321eJCYWwW/HdySZ9KXBMxzJtUFGLsqttU3MUOPQlopR6XcZ2ToA:321eJAwW/9y8KXB0zrUFisqtCMUXopRK
- TLSH T13077336FFFA7FAA4E611EB31F639C9A3173A2CA3150E491A53B1414971C20E0B7795C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GalaxyDesk-0.9.0-win-x64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
GalaxyDesk-0.9.0-win-x64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
codespace-live-native.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
codespace-live-native.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
runtime/payload/agent/codespace-engine.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
runtime/payload/agent/codespace-engine.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
runtime/payload/frontend/cloud/box.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
runtime/payload/frontend/cloud/box.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
runtime/payload/frontend/cloud/dropbox.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
runtime/payload/frontend/cloud/dropbox.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
runtime/payload/frontend/cloud/gdrive.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
runtime/payload/frontend/cloud/gdrive.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
runtime/payload/frontend/cloud/onedrive.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
runtime/payload/frontend/cloud/onedrive.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
runtime/payload/frontend/git/azure.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
runtime/payload/frontend/git/azure.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
runtime/payload/frontend/git/bitbucket.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
runtime/payload/frontend/git/bitbucket.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
runtime/payload/frontend/git/github.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
runtime/payload/frontend/git/github.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
runtime/payload/frontend/git/gitlab.svg
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target GalaxyDesk-0.9.0-win-x64.exe
- Size 32.3MB
- SHA256 519c6fdf7f8109bf03d42e309a8bcf9788bb5672602dc36efe6c4876f58e684e
- MD5 1e61950e6ee2f32a972644cca3cd46c3
- SHA1 ed343dafcb25fd25fe42925c888ac8da91eb1aee
- SHA512 317b8a11eeefd9dd8935bf44ac92e0295d31b17c949cb91c20e339c891002f64b04f61ef3678811a47b70986c38252d2bade6fb3865fabd7e92b96f22f55a3a0
- SSDEEP 786432:321eJCYWwW/HdySZ9KXBMxzJtUFGLsqttU3MUOPQlopR6XcZ2ToA:321eJAwW/9y8KXB0zrUFisqtCMUXopRK
- TLSH T13077336FFFA7FAA4E611EB31F639C9A3173A2CA3150E491A53B1414971C20E0B7795C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 32e35e4b97f8df08f07d8879ba2ec963c75707440cfc0275e944a31c946f633f
- MD5 58696f9e1a48139fb1b0ed289a88f386
- SHA1 71ed08169cf00dd00d41d41395fd982ff8e8c5fd
- SHA512 3feac3983c39194d9101c803d69c395c33d8757e6ab746447f0f22ee9d0d8f790bb4f0c6c9f4fe7fae66cd6119c2b456c02ab051ffb62af4d010387998760d33
- SSDEEP 384:3rSQMCOUILnCaSPy/yhJzmGSMRWyOUKiR:3rSQMCOp0yamMRWysiR
- TLSH T15C623C16B62084F5CBB2167034D73B3E6BB28F6A1A2848C24BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
- MD5 9ba64ba25b26b3964fe1ca1d331387ee
- SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
- SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
- SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
- TLSH T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target codespace-live-native.exe
- Size 15.1MB
- SHA256 4fb9bcf1b40a1a5ad925663adbcf8e388bce39445a85453dd684223363055f90
- MD5 6d01efcccf6bc846d743ab672f39e9c0
- SHA1 4ec991ba9105b7a8a4a30232da842d2c215675da
- SHA512 3b3fdd7acf72543f9b7f0f4a0fdc30bf23fe98bd34ffe1226bfb0790b17c65fe666c3d169e64bb724c111917dd58d847bbb690369616b487ab4030c71d8d5be6
- SSDEEP 196608:XrPyx9VmmFtw/8yzng24JxbrQp/WHgM4dKzNVTDTiVTuftQt4Xvl7nOP4YJcifz:Dyx9VmmFtTcoN7naN
- TLSH T11DF62911BA5BA9ACD15AC87083468A735E2170DB0A36B9FF45C442383FB9BF05F38759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target runtime/payload/agent/codespace-engine.exe
- Size 39.4MB
- SHA256 1033e6f37bc742aa54cc0df119a5aefaa97d2d70d0cdc5bb0403e56d314fe05e
- MD5 04dfb9771e2a740160fa07f2e85cdb74
- SHA1 d61c33a7d9ececc449a2c63623bc13098fbb810b
- SHA512 820a6de3320a300e0e25162885f11e00e63f23f10dd28d779dc1b2f17e8bf6f0f5815d55ac8d18fb614f7c6c5d87044ddbc175ef2483dd27a3deda92771fe75b
- SSDEEP 196608:awgkHXtb9C5RzcQlJQnB6XjxEgLqP9MLPuLZybO6PW46pU8LzGp9EVfQX:awgKdxiZcSQnyxbU9MLPwZy0HLzq9F
- TLSH T15797F6257B5E986DD19BC870834A8A624A7030DB1B35B9FF44C596343FBEAF41B2C358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target runtime/payload/frontend/cloud/box.svg
- Size 1KB
- SHA256 1b4654cd323e72271740fdb7594a6e652c7fb302db96c8c8714becb2f3a27e47
- MD5 1bc0389a16e0628ee15164089fb799d7
- SHA1 e108f45a12a3eee8a289da13d381dd97925e2fab
- SHA512 d2b5df1453b25e9e3bc5ba9d7b6cac1e178fe0f73d9eedeb00d45fc9ef1c9af1153f71b8ae5355344a5119e680d657199aab1240ec3439128eee137b5b928bbf
- TLSH T1C211CECA265156DCF1CFAB95CF78E4543025306E3AFA30E2DADDDE501087FBAD842458
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/cloud/dropbox.svg
- Size 351B
- SHA256 18095ef0bdf7e0fd7dd988589190ffee08ae31b343bc866eaf15242d62ba1e45
- MD5 ccf32103252e7e6e27fede4ec276e7b4
- SHA1 e3fdfc1c56a29fd56fad1677a696341025d36c10
- SHA512 f05af02e109deb71601ccc9734928355a9e3e28756ddd91fabd999f7c575d95c529304b45fb2e6e7b58e39283b37debb23eca753bb99f33b2fbdf73adbc1219a
- TLSH T1C0E0868772141D09A234BF0CE466F719409D18912BEDC46ED6D53950AEA2DF26C0EB31
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/cloud/gdrive.svg
- Size 614B
- SHA256 95731495ffd170201c8b5374918c02235880dea09de4e6fb98132f465e27ff36
- MD5 e99052ddd3fe8b23c0a193a7fb8baf48
- SHA1 48ff2602590da7d364e52147773011d9cf4808a8
- SHA512 dc7463ee51d7663ba04ccfe5924e55a7c502af6e88dc79cb5480e0cc24cb65aad866200cc9559cdee7e2941b916df8bd16239e71acf5a3dc3ae8b9d307f703c8
- TLSH T12CF047D55208518890EFA609DFFF1F951B8BC8FD9FC5C255E8FB46302062950DE44F04
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/cloud/onedrive.svg
- Size 1KB
- SHA256 d3e6063131a60b05a35747a999cec116595f4f6ef6d04f9d0b40ff9a4c3d65ea
- MD5 207dac621d1837984d5c5a32cd619373
- SHA1 64c036f486d5308f39cd7eeef7e2e910d86c1b78
- SHA512 cb66720c2ca972d46cfa3123e00e3af9ed323aa443fd0af1dd841d38bd92d308d158a817224f82ec07b19a0408ee015776c4c0eab9b02716b474ad1a7c9fb49b
- TLSH T1C12131CB122096489BC9C18EEF203AE0A01790ADAB7594CE86CFD74CA18F8D9F108C94
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/git/azure.svg
- Size 1KB
- SHA256 abc639d094593943c1b201270f4903c74d02d2e26acf26abf592a29c222c5181
- MD5 6b2eaa00b3ce83fe467f2f87bffd47b6
- SHA1 3b68af7062cf459f76d2e6e4d8a2906bd6bfadcf
- SHA512 610c130104000728732517b63a35e98d179c332288f9100c4eca8482bfeed046535e31f2ff0d3ca93f1fc75dfbb3dcbcd9935b456b606c9ab16640b974936632
- TLSH T1E631EFD69318787BE05A8FDECCE3A916116C70EAF4F4C1B055112B5D11267C60D1F710
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/git/bitbucket.svg
- Size 299B
- SHA256 c19efdc9a2a8fa5ee48581140b66a16672be527c23e343314f3b9b744823a0c5
- MD5 5d711565d53f7c2acb48ee40c9e997a1
- SHA1 5fecd57d2c148c7876a7b165a79491a518672b26
- SHA512 83fb97ac92c83b00357510b2e18f13d10294b993675d18b9519ff413143baaa0c23d49d52ecd78086e4707ff633996f2de7d0fae0d0cf2894760e999dcd465a8
- TLSH T18FE0E7CDC8CD2948F9ECCF1114E03641B8A6044E64C8C0A4D5CF0246B13D070E741170
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/git/github.svg
- Size 902B
- SHA256 b86159b459ccbcd5e30108a079f33b1acc41fcf582321ff5475cb05f10b98d2d
- MD5 36af4eca740f062c702e648bea0457b9
- SHA1 d408a4cedb1bdebf8e38b9fcca85406e563d8fe0
- SHA512 fb3d07d42514ec6ba38ba86ff74d2c342d85fddbeec9d710db98c7387749bad57864a2270bfb2b6b3189507630696b45b7443bbbefaeb26d96cdceae507feef9
- TLSH T1D31140D17BB0AB8EEA008267AE98B6D4200700FE32FE4840C59EE6A43081DDCBB14C84
- MD5 SHA1 SHA512 TLSH
-
- Target runtime/payload/frontend/git/gitlab.svg
- Size 588B
- SHA256 a8e6f3339a082f530c5a013f79606a8a5f7975ae1497aed9b7cbfa21bfae55d8
- MD5 cd3a04c9cd9988bc9a110ee875890bde
- SHA1 28cfe6daea3340e401ba2b16b2a5b2abb4d16978
- SHA512 4062e9909066d1ceeb4cdbccf7b8ff65653dd05bf770ff8299f0244897b64db360dddbff545bdbd36ba9e402cae51745e6d0a245b6ba9cb97eae4940fae074a6
- TLSH T132F0D8E99A4C2D6E641DEF952FF9ADE9430E30B8798500685CCBD6C14281983E887800
- MD5 SHA1 SHA512 TLSH