General

  • Target
    GalaxyDesk-0.9.0-win-x64.exe
  • Size 32.3MB
  • Sample261001-phyp6sbf37
  • SHA256 519c6fdf7f8109bf03d42e309a8bcf9788bb5672602dc36efe6c4876f58e684e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      GalaxyDesk-0.9.0-win-x64.exe
    • Size 32.3MB
    • SHA256 519c6fdf7f8109bf03d42e309a8bcf9788bb5672602dc36efe6c4876f58e684e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/NSISdl.dll
    • Size 15KB
    • SHA256 32e35e4b97f8df08f07d8879ba2ec963c75707440cfc0275e944a31c946f633f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/StartMenu.dll
    • Size 7KB
    • SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsis_tauri_utils.dll
    • Size 33KB
    • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      codespace-live-native.exe
    • Size 15.1MB
    • SHA256 4fb9bcf1b40a1a5ad925663adbcf8e388bce39445a85453dd684223363055f90
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      runtime/payload/agent/codespace-engine.exe
    • Size 39.4MB
    • SHA256 1033e6f37bc742aa54cc0df119a5aefaa97d2d70d0cdc5bb0403e56d314fe05e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      runtime/payload/frontend/cloud/box.svg
    • Size 1KB
    • SHA256 1b4654cd323e72271740fdb7594a6e652c7fb302db96c8c8714becb2f3a27e47
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/cloud/dropbox.svg
    • Size 351B
    • SHA256 18095ef0bdf7e0fd7dd988589190ffee08ae31b343bc866eaf15242d62ba1e45
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/cloud/gdrive.svg
    • Size 614B
    • SHA256 95731495ffd170201c8b5374918c02235880dea09de4e6fb98132f465e27ff36
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/cloud/onedrive.svg
    • Size 1KB
    • SHA256 d3e6063131a60b05a35747a999cec116595f4f6ef6d04f9d0b40ff9a4c3d65ea
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/git/azure.svg
    • Size 1KB
    • SHA256 abc639d094593943c1b201270f4903c74d02d2e26acf26abf592a29c222c5181
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/git/bitbucket.svg
    • Size 299B
    • SHA256 c19efdc9a2a8fa5ee48581140b66a16672be527c23e343314f3b9b744823a0c5
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/git/github.svg
    • Size 902B
    • SHA256 b86159b459ccbcd5e30108a079f33b1acc41fcf582321ff5475cb05f10b98d2d
    • MD5 SHA1 SHA512 TLSH
    • Target
      runtime/payload/frontend/git/gitlab.svg
    • Size 588B
    • SHA256 a8e6f3339a082f530c5a013f79606a8a5f7975ae1497aed9b7cbfa21bfae55d8
    • MD5 SHA1 SHA512 TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

defense_evasiondiscoverytrojan
Score
6/10

behavioral14

defense_evasiondiscoverytrojan
Score
6/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoveryspyware
Score
4/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
4/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
4/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
4/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
4/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
4/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
4/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10