7f874e1018fb27609df79be210c6b4345246dd3559577afc56c561879da1dd4b | Triage

Analysis

max time network
312s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 15:18

Sharing

Reason

Reading agent response: read tcp 10.127.0.1:40936->10.127.0.21:8000: read: connection timed out

Report Analysis Logs

General

Target

AnyDesk_x64x32/About/en-US/CredUI.xml
Size

3KB
MD5

1c00f0e54b646baca8571fc0b7be9582
SHA1

0494d0849b95970d96e480c9b00c3694e4d50029
SHA256

625371bba40530a9a4a88e167b4870634f7583bb601d16954ed8ff4a0e5242e9
SHA512

99a2b51a6addf470b15dfdc2d3d32ca305113c427cdf7c3b85fd3bd43f17b989b5bea38ba78821da5a8978437dd3e484ccb283d9b01b737c05c4b7d82288d749

Score

7^/10

Malware Config

Signatures

Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes:

description ioc

Destination IP 162.159.36.2
Destination IP 162.159.36.2
Destination IP 162.159.36.2

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...