General

  • Target

    AnyDesk (DROPSY).exe

  • Size

    8.4MB

  • Sample

    230409-ayfrzahh8v

  • MD5

    473a3c8d7f09e0c24ceedcb639fc3d93

  • SHA1

    df560493b628b30b43e9ed71e1c419a9465690f6

  • SHA256

    f0c95b09ead49d1fe42e25f6d4f8bbcd3492d28c8f508e45e59feb31f4011c3e

  • SHA512

    28e7d47cc85633742139e2188161f1104190e6259eb3b4f274fb3cc7a1a91b6f9a37c804c7a744b4b2feba77b6b6e5c3bcf67aa22a9e29d69152202d9337aa53

  • SSDEEP

    196608:abstwhbd7KSM/cVBP6uYLDYKFlhbstwhbd7KSM/cVB:abstahKSzVBSrL0ObstahKSzVB

Score
7/10

Malware Config

Targets

    • Target

      AnyDesk (DROPSY).exe

    • Size

      8.4MB

    • MD5

      473a3c8d7f09e0c24ceedcb639fc3d93

    • SHA1

      df560493b628b30b43e9ed71e1c419a9465690f6

    • SHA256

      f0c95b09ead49d1fe42e25f6d4f8bbcd3492d28c8f508e45e59feb31f4011c3e

    • SHA512

      28e7d47cc85633742139e2188161f1104190e6259eb3b4f274fb3cc7a1a91b6f9a37c804c7a744b4b2feba77b6b6e5c3bcf67aa22a9e29d69152202d9337aa53

    • SSDEEP

      196608:abstwhbd7KSM/cVBP6uYLDYKFlhbstwhbd7KSM/cVB:abstahKSzVBSrL0ObstahKSzVB

    Score
    7/10
    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix

Tasks