Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
11-04-2023 21:57
General
-
Target
AnyDesk (MANGO LATEST).exe
-
Size
1.8MB
-
MD5
87c2218ec8cb9e9c50d0eacdb60f1f4f
-
SHA1
ffd0b860c9805ab591b1536e881e6302a729fff5
-
SHA256
2b39e6aaaf0236925175a16f8c0b69b4f59ec298e09c74cac3aa7f89b352374f
-
SHA512
080bcbd9eeb414a3ce8f7c635082944c6481663f8c25ec5e186891ca6a2fc4be2d99b7cc4da00bc2584e55e8ab30bedd809a6aeb5e34c2bfeb905420f7666e1b
-
SSDEEP
49152:GxeSA72PbxqYB4hsVXuRjRzeGxqlegrAq:yxA7MEYmy9eZeGVgr
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AnyDesk (MANGO LATEST).exe"C:\Users\Admin\AppData\Local\Temp\AnyDesk (MANGO LATEST).exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
142KB
MD59c43f77cb7cff27cb47ed67babe3eda5
SHA1b0400cf68249369d21de86bd26bb84ccffd47c43
SHA256f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e
SHA512cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7
-
Filesize
142KB
MD59c43f77cb7cff27cb47ed67babe3eda5
SHA1b0400cf68249369d21de86bd26bb84ccffd47c43
SHA256f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e
SHA512cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
512KB
-
Filesize
1.8MB
-
Filesize
1.2MB
-
Filesize
1.6MB
-
Filesize
1.8MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.7MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
156KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB