d977740e676b93ff5249173225679982535b688ed9c1fffee7d5f51c91b3da01

General

Target
Nayix-Services-Setup-x64.exe
Size 3.3MB
Sample261110-ew37psyyex
SHA256 d977740e676b93ff5249173225679982535b688ed9c1fffee7d5f51c91b3da01
MD5 61bc3488b3ce93042278772dd5fe21e2
SHA1 c80a36fcb7a4a47fef5cfadb5cadd04ad709460f
SHA512 30047cfba5ad3beb9a77dc5b1a30d094d6283dc974f0f54ed5947475946434a7e2b51fc7e8bf2b86c624a0479f3caada36436cc9e2c329d64dd884ba4896f9c3
SSDEEP 49152:axeRjJ/x9C/YbejuNsO1kD7FzmR0Z/eq5hDEXDtpvfujGdj878BsLsP/ZyIXJiDE:aQR2V+SF5ThwXD/nNdWyJ05lB67
TLSH
T1EFF5334171B4A86EF3B668326BB84D3194DF9033E8FA2A0D1B44ED17349752FD2626CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Nayix-Services-Setup-x64.exe
- Size 3.3MB
- SHA256 d977740e676b93ff5249173225679982535b688ed9c1fffee7d5f51c91b3da01
- MD5 61bc3488b3ce93042278772dd5fe21e2
- SHA1 c80a36fcb7a4a47fef5cfadb5cadd04ad709460f
- SHA512 30047cfba5ad3beb9a77dc5b1a30d094d6283dc974f0f54ed5947475946434a7e2b51fc7e8bf2b86c624a0479f3caada36436cc9e2c329d64dd884ba4896f9c3
- SSDEEP 49152:axeRjJ/x9C/YbejuNsO1kD7FzmR0Z/eq5hDEXDtpvfujGdj878BsLsP/ZyIXJiDE:aQR2V+SF5ThwXD/nNdWyJ05lB67
- TLSH
  T1EFF5334171B4A86EF3B668326BB84D3194DF9033E8FA2A0D1B44ED17349752FD2626CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH
  T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
- MD5 79c27de4d1c6d295fefaa70f608f1c67
- SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
- SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
- SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
- TLSH
  T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Nayix Services.exe
- Size 5.2MB
- SHA256 cf1d33252b25f03bb98c3ef3d211c6a52d58bf28ad0a2e2ded44eb8c8669a23b
- MD5 c44dbb8d5cb82157ee951fb89f1433df
- SHA1 27d179f92831fce5f4316ee46cd6824a64f95e43
- SHA512 7c1fe10e24b229a3df48c7526ab597ecc9042318ce4e8ee465839e6fe37877b8f8a5fc4e5fa2870bcd308796cbe26ce229bb59f0351e9818164994a72aacccc2
- SSDEEP 98304:nwC4byspxKtNz6lDEytOOBo0kjNLcax+Jsf7KjJ3pDxpG:np42JtNzSDEyZexg1ppV
- TLSH
  T1A546F106F7468349DD275D3487A7E356B362F8441B16C2CBA3681B989E872F80D7B3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4