General
-
Target
AnyDesk.exe
-
Size
3.8MB
-
Sample
230205-ygsl7sea5t
-
MD5
e546506082b374a0869bdd97b313fe5d
-
SHA1
082dc6b336b41788391bad20b26f4b9a1ad724fc
-
SHA256
fc19f3275d02764cf249dc6fe8962e06b83a4f5769cc369bc4f77b90c567df18
-
SHA512
15a8d7c74193dffd77639b1356ccbe975d17de73d0d6d177b8ecf816d665f620adefcded37c141bac0b2d8564fbba61aca4d9b01885740f23fbcc190515cbd08
-
SSDEEP
98304:uSCb8xJlb0VgU/vZaZKa4opQILfbsLajDMWEeq7PbUs6En5:uH8HCOUZakpAbjbsLsMmqM
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk.exe
Resource
win10-20220901-es
Malware Config
Extracted
C:\Program Files (x86)\Google\Chrome Remote Desktop\110.0.5481.7\CREDITS.txt
[email protected])"
[email protected])"
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
"[email protected]"
<[email protected]>
http://www.kurims.kyoto-u.ac.jp/~ooura/fft.html
https://github.com/puppeteer/replay
http://www.apache.org/licenses/
http://www.apache.org/licenses/LICENSE-2.0
https://github.com/abseil/abseil-cpp
https://www.apache.org/licenses/
https://www.apache.org/licenses/LICENSE-2.0
https://raw.githubusercontent.com/GoogleChrome/accessibility-developer-tools/master/dist/js/axs_testing.js
https://github.com/acornjs/acorn
https://aomedia.googlesource.com/aom/
http://code.google.com/p/angleproject/
http://lcamtuf.coredump.cx/afl/
http://source.android.com
http://developer.android.com/tools/extras/support-library.html
https://developer.android.com/topic/libraries/architecture/index.html
https://android.googlesource.com/platform/frameworks/support
http://developer.android.com/sdk/index.html
https://android.googlesource.com/platform/frameworks/base
http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations/
https://github.com/google-ar/arcore-android-sdk
https://developers.google.com/ar/develop/java/enable-arcore#dependencies
https://github.com/intel/ARM_NEON_2_x86_SSE
https://github.com/dequelabs/axe-core/
http://mozilla.org/MPL/2.0/
http://software.blackmagicdesign.com/DeckLink/v10.7/Blackmagic_DeckLink_SDK_10.7.zip
http://www.chromium.org/blink
http://www.torchmobile.com/
https://boringssl.googlesource.com/boringssl
https://cla.developers.google.com/clas
http://www.openssl.org/)"
https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS
https://github.com/liblouis/liblouis
https://chromium.googlesource.com/breakpad/breakpad
http://www.opensource.apple.com/apsl/
https://github.com/google/brotli
http://www.daemonology.net/bsdiff/
http://lxr.mozilla.org/mozilla/source/toolkit/mozapps/update/src/updater/
https://github.com/rianhunter/zxcvbn-cpp
https://chromium.googlesource.com/cast_core/public
https://checkerframework.org
https://github.com/typetools/jdk
https://github.com/typetools/stubparser
https://github.com/typetools/annotation-tools
https://github.com/plume-lib/
http://code.google.com/p/google-axs-chrome/
https://github.com/google/cityhash
http://github.com/google/closure-compiler
http://caminobrowser.org/
http://www.mozilla.org/MPL/
https://github.com/codemirror/CodeMirror/
https://github.com/codemirror/CodeMirror.next/
https://github.com/google/compact_enc_det
https://github.com/google/cld3
https://developers.google.com/android/guides/setup
http://source.android.com/
http://source.android.com/compatibility
https://github.com/pytorch/cpuinfo
https://crashpad.chromium.org/
https://github.com/google/crc32c
https://github.com/google/crubit
https://github.com/d3/d3
https://github.com/google/dagger
http://www.opensource.apple.com/
http://www.apple.com/legal/guidelinesfor3rdparties.html
https://code.videolan.org/videolan/dav1d
https://dawn.googlesource.com/dawn
https://chromium.googlesource.com/devtools/devtools-frontend
https://github.com/y-256/libdivsufsort
https://github.com/chromium/dom-distiller
http://code.google.com/p/data-race-test/wiki/DynamicAnnotations
https://easylist.to/easylist/easylist.txt
https://github.com/easylist
https://easylist.to/)"
https://creativecommons.org/compatiblelicenses
https://creativecommons.org/
http://eigen.tuxfamily.org/
https://github.com/googlei18n/emoji-segmenter
https://github.com/googlefonts/emoji-metadata
https://errorprone.info/
https://source.android.com/
https://github.com/libexpat/libexpat
https://github.com/google/farmhash
http://www.netlib.org/fdlibm/
http://ffmpeg.org/
http://developer.intel.com/vtune/cbts/strmsimd/922down.htm
http://skal.planet-d.net/coding/dct.html
http://developer.intel.com/vtune/cbts/strmsimd/appnotes.htm
http://www.elecard.com/peter/idct.html
http://www.linuxvideo.org/mpeg2dec/
https://github.com/mit-plv/fiat-crypto
https://github.com/GPUOpen-Effects/FidelityFX-SPD
http://findbugs.sourceforge.net/
https://firebase.google.com
http://www.opensource.org/licenses/bsd-license.php
http://downloads.xiph.org/releases/flac/flac-1.3.1.tar.xz
https://github.com/google/flatbuffers
https://github.com/westes/flex
https://github.com/Maratyszcza/FP16
http://www.freetype.org/
https://www.freetype.org
https://fusejs.io
https://github.com/Maratyszcza/FXdiv
https://github.com/google/gemmlowp
http://android-gifview.googlecode.com/svn/!svn/bc/8/trunk/
https://github.com/chromium/content_analysis_sdk
https://github.com/google/closure-library
https://github.com/google/double-conversion
https://github.com/googlei18n/google-input-tools.git
https://github.com/google/google-toolbox-for-mac
https://pki.goog/roots.pem
https://github.com/google/glog
http://code.google.com/p/google-jstemplate/
https://github.com/grpc/grpc
https://github.com/grpc/grpc-java
https://github.com/google/gson
https://github.com/google/guava
https://github.com/googlevr/gvr-android-sdk
http://www.mozilla.org/MPL/2.0/
http://www.mozilla.org/MPL/2.0/FAQ.html
http://freetype.sourceforge.net/license.html
http://www.freetype.org
http://source.icu-project.org/repos/icu/icu/trunk/license.html
http://icu-project.org/userguide/icufaq.html
http://www.unicode.org/copyright.html
http://www.unicode.org/Public/
http://www.unicode.org/reports/
http://www.unicode.org/cldr/data/
http://jquery.com/
https://github.com/jquery/jquery/blob/master/MIT-LICENSE.txt
https://github.com/jquery/sizzle/blob/master/LICENSE
http://ctrio.sourceforge.net/
http://www.cisl.ucar.edu/css/software/fftpack5/ftpk.html
http://www.opensource.org/licenses/mit-license.php
http://harfbuzz.org
https://github.com/Microsoft/webauthn/
https://github.com/google/highway
http://hunspell.sourceforge.net/
https://android.googlesource.com/platform/external/hyphenation-patterns/
http://www.tex-tipografia.com/spanish_hyphen.html
https://opensource.org/licenses/BSD-3-Clause
https://github.com/LinuxA11y/IAccessible2
http://www.ijg.org
https://github.com/unicode-org/icu
https://www.unicode.org/copyright.html
http://opensource.org/licenses/bsd-license.php
https://sourceforge.net/project/?group_id=1519
http://chasen.aist-nara.ac.jp/chasen/distribution.html
http://casper.beckman.uiuc.edu/~c-tsai4
https://github.com/rober42539/lao-dictionary
https://github.com/rober42539/lao-dictionary/laodict.txt
https://github.com/rober42539/lao-dictionary/LICENSE.txt
https://github.com/GoogleChromeLabs/chromium-bidi/archive/f8d953fa7313c562f88471865a4fd18dc81f1715.zip
https://chromium.googlesource.com/deps/inspector_protocol/
http://www.jetbrains.org
https://github.com/googlei18n/libphonenumber/
https://github.com/formatjs/formatjs
https://chromium.googlesource.com/chromium/src/third_party/ipcz
http://developer.mozilla.org/en-US/docs/Accessibility/AT-APIs
https://github.com/google/j2objc/
http://code.google.com/p/atinject/
https://jinja.palletsprojects.com/
https://github.com/open-source-parsers/jsoncpp
http://www.khronos.org/registry
http://oss.sgi.com/projects/FreeB/
https://github.com/KhronosGroup/glslang
https://www.khronos.org/registry/
https://github.com/KhronosGroup/Vulkan-Tools
https://github.com/KhronosGroup/Vulkan-ValidationLayers
https://kotlinlang.org/
https://github.com/Kotlin/kotlinx.coroutines
http://ltp.sourceforge.net/coverage/lcov.php
https://github.com/google/leveldb.git
https://github.com/google/libaddressinput
https://github.com/AOMediaCodec/libavif
http://brltty.app
http://libcxx.llvm.org/
https://llvm.org/docs/DeveloperPolicy.html#legacy
http://llvm.org
http://libcxxabi.llvm.org/
http://libevent.org/
http://llvm.org/docs/LibFuzzer.html
https://chromium.googlesource.com/codecs/libgav1/
https://chromium.googlesource.com/chromiumos/platform2/libipp
https://chromium.googlesource.com/external/webrtc
https://github.com/libjpeg-turbo/libjpeg-turbo/
http://libpng.org/
https://github.com/google/libprotobuf-mutator
https://git.gnome.org/browse/libsecret/
https://github.com/cisco/libsrtp
http://www.freedesktop.org/wiki/Software/systemd/
https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libunwind.git
http://libusb.org
https://github.com/cls/libutf
http://www.unicode.org/Public/zipped/9.0.0/UCD.zip
https://chromium.googlesource.com/webm/libvpx
https://gitlab.freedesktop.org/xorg/lib/libx11
https://gitlab.freedesktop.org/xorg/lib/libxcb-keysyms
http://xmlsoft.org
http://xmlsoft.org/XSLT
http://code.google.com/p/libyuv/
https://github.com/nih-at/libzip
http://www.logilab.org/
https://github.com/airbnb/lottie-web
https://github.com/airbnb/lottie-ios.git
http://www.7-zip.org/sdk.html
https://github.com/google/maldoca.git
https://github.com/markedjs/marked
https://github.com/chjj/
http://daringfireball.net/
https://github.com/material-components/material-components-android
https://github.com/material-components/material-components-ios
https://github.com/google/material-design-icons
https://github.com/material-foundation/material-font-disk-loader-ios
https://github.com/material-foundation/material-internationalization-ios
https://github.com/material-foundation/material-roboto-font-loader-ios
https://github.com/material-foundation/material-sprited-animation-view-ios
https://github.com/material-foundation/material-text-accessibility-ios
https://github.com/material-components/material-components-web-components
https://android.googlesource.com/platform/development/+/b356564/samples/Support4Demos/src/com/example/android/supportv4/media/MediaController.java
https://android.googlesource.com/platform/cts/+/master/tests/tests/provider/src/android/provider/cts/MediaStoreUtils.java
http://www.mesa3d.org/
https://chromium.googlesource.com/chromiumos/platform/minigbm
https://github.com/client9/stringencoders
http://modp.com/release/base64
https://github.com/material-motion/motion-animator-objc
https://github.com/material-motion/motion-interchange-objc
https://github.com/material-motion/motion-transitioning-objc
https://dxr.mozilla.org/mozilla-central/source/security/manager/
https://searchfox.org/mozilla-central/rev/0fec57c05d3996cc00c55a66f20dd5793a9bfb5d/security/manager/ssl/EnterpriseRoots.cpp
http://code.google.com/p/nativeclient
https://github.com/google/nearby
http://www.mozilla.org/projects/nspr/
https://www.nasm.us/
http://www.mozilla.org/projects/security/pki/nss/
http://sourceware.org/newlib/docs.html
http://sourceware.org/ml/newlib/
http://cristal.univ-lille.fr/~casiez/1euro/
https://chromium.googlesource.com/openscreen
http://www.openh264.org/
https://github.com/KhronosGroup/OpenXR-SDK
https://gitlab.xiph.org/xiph/opus
https://datatracker.ietf.org/ipr/1524/
https://datatracker.ietf.org/ipr/1914/
https://datatracker.ietf.org/ipr/1526/
https://github.com/khaledhosny/ots.git
http://www.azillionmonkeys.com/qed/hash.html
http://code.google.com/p/pdfium/
https://android.googlesource.com/platform/external/perfetto/
https://github.com/perfmark/perfmark
https://bitbucket.org/jpommier/pffft/
http://website-archive.mozilla.org/www.mozilla.org/mpl/MPL/NPL/1.1/
http://www.mozilla.org/NPL/
http://code.google.com/p/lao-dictionary/
http://lao-dictionary.googlecode.com/git/Lao-Dictionary.txt
http://lao-dictionary.googlecode.com/git/Lao-Dictionary-LICENSE.txt
http://www.dabeaz.com/ply/ply-3.11.tar.gz
https://polymer-library.polymer-project.org
https://github.com/google/pprof/tree/master/proto
https://github.com/google/private-join-and-compute
https://github.com/google/protobuf
https://github.com/protocolbuffers/protobuf/blob/master/java/lite.md
https://github.com/Maratyszcza/pthreadpool
https://android.googlesource.com/platform/external/puffin
https://github.com/dpranke/pyjson5
http://www.pylint.org/
https://github.com/GoogleChromeLabs/pywebsocket3/
https://quiche.googlesource.com/quiche
https://github.com/jrmuizel/qcms/tree/v4
https://github.com/google/re2
https://github.com/xiph/rnnoise
http://opensource.perlig.de/rjsmin/
https://github.com/google/securemessage
https://github.com/SeleniumHQ/selenium/tree/trunk
https://android.googlesource.com/platform/external/setupdesign/
https://github.com/google/shell-encryption
https://github.com/simplejson/simplejson
https://skia.org/
http://code.google.com/p/smhasher/
http://google.github.io/snappy/
https://creativecommons.org/licenses/by/3.0/
https://sites.google.com/site/gaviotachessengine/Home/endgame-tablebases-1
http://www.ploscompbiol.org/static/license
http://www.gutenberg.org/ebooks/53
http://devel.freebsoft.org/speechd
https://github.com/KhronosGroup/SPIRV-Headers.git
https://github.com/KhronosGroup/SPIRV-Tools.git
https://github.com/KhronosGroup/SPIRV-Cross
https://sqlite.org/
http://www.strongtalk.org/
http://www.suitable.com/tools/smslib.html
http://www.suitable.com
https://www.swift.org/download/
https://swiftshader.googlesource.com/SwiftShader
https://github.com/tensorflow/tensorflow
https://github.com/tensorflow/tflite-support
https://github.com/tensorflow/models
https://github.com/tensorflow/text.git
https://pagure.io/lohit
http://www.nongnu.org/freebangfont/downloads.html#mukti
https://dejavu-fonts.github.io/Download.html
http://scripts.sil.org/OFL
https://github.com/GoogleChromeLabs/text-fragments-polyfill
http://www.chromium.org
https://github.com/google/diff-match-patch/tree/master/javascript
https://github.com/google/distributed_point_functions
https://github.com/google/ruy
http://www.linux-usb.org/usb-ids.html
http://wix.codeplex.com/
https://github.com/google/ukey2
http://cldr.unicode.org/index/downloads
https://github.com/aawc/unrar.git
https://github.com/google/google-api-cpp-client/
https://chromium.googlesource.com/chromium/src/+/HEAD/third_party/liburlpattern
http://mxr.mozilla.org/comm-central/source/mozilla/netwerk/base/src/nsURLParsers.cpp
http://git.linuxtv.org/v4l-utils.git
http://code.google.com/p/v8
http://valgrind.org
https://github.com/KhronosGroup/Vulkan-Headers
https://chromium.googlesource.com/vulkan-deps/
https://github.com/KhronosGroup/Vulkan-Loader
https://github.com/GPUOpen-LibrariesAndSDKs/VulkanMemoryAllocator
https://github.com/wasdk/wasmparser
https://github.com/web-animations/web-animations-js
http://webkit.org/
https://chromium.googlesource.com/webm/libwebm
https://chromium.googlesource.com/webm/libwebp
http://www.webrtc.org
https://gitlab.freedesktop.org/wayland/weston
http://cgit.freedesktop.org/xorg/xserver/tree/COPYING
https://sourceforge.net/projects/wtl/files/WTL%2010/
https://github.com/google/woff2
https://github.com/google/wuffs-mirror-release-c
https://gitlab.freedesktop.org/xorg/proto/xproto/
http://freedesktop.org
https://gitlab.freedesktop.org/xdg/xdgmime
http://www.freedesktop.org/wiki/Software/xdg-user-dirs
https://github.com/google/xnnpack
https://github.com/Cyan4973/xxHash
http://tukaani.org/xz/
http://src.chromium.org/viewvc/chrome/trunk/deps/third_party/xz/COPYING
http://zlib.net/
Targets
-
-
Target
AnyDesk.exe
-
Size
3.8MB
-
MD5
e546506082b374a0869bdd97b313fe5d
-
SHA1
082dc6b336b41788391bad20b26f4b9a1ad724fc
-
SHA256
fc19f3275d02764cf249dc6fe8962e06b83a4f5769cc369bc4f77b90c567df18
-
SHA512
15a8d7c74193dffd77639b1356ccbe975d17de73d0d6d177b8ecf816d665f620adefcded37c141bac0b2d8564fbba61aca4d9b01885740f23fbcc190515cbd08
-
SSDEEP
98304:uSCb8xJlb0VgU/vZaZKa4opQILfbsLajDMWEeq7PbUs6En5:uH8HCOUZakpAbjbsLsMmqM
Score10/10-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-