2b39e6aaaf0236925175a16f8c0b69b4f59ec298e09c74cac3aa7f89b352374f

Analysis

max time kernel
16s
max time network
18s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
11/04/2023, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

AnyDesk (MANGO LATEST).exe
Size

1.8MB
MD5

87c2218ec8cb9e9c50d0eacdb60f1f4f
SHA1

ffd0b860c9805ab591b1536e881e6302a729fff5
SHA256

2b39e6aaaf0236925175a16f8c0b69b4f59ec298e09c74cac3aa7f89b352374f
SHA512

080bcbd9eeb414a3ce8f7c635082944c6481663f8c25ec5e186891ca6a2fc4be2d99b7cc4da00bc2584e55e8ab30bedd809a6aeb5e34c2bfeb905420f7666e1b
SSDEEP

49152:GxeSA72PbxqYB4hsVXuRjRzeGxqlegrAq:yxA7MEYmy9eZeGVgr

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3724	AnyDesk (MANGO LATEST).exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3724	AnyDesk (MANGO LATEST).exe

C:\Users\Admin\AppData\Local\Temp\AnyDesk (MANGO LATEST).exe
"C:\Users\Admin\AppData\Local\Temp\AnyDesk (MANGO LATEST).exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
PID:3724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

Filesize
142KB

MD5
9c43f77cb7cff27cb47ed67babe3eda5

SHA1
b0400cf68249369d21de86bd26bb84ccffd47c43

SHA256
f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

SHA512
cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

Filesize
142KB

MD5
9c43f77cb7cff27cb47ed67babe3eda5

SHA1
b0400cf68249369d21de86bd26bb84ccffd47c43

SHA256
f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

SHA512
cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

Download Submit
memory/3724-170-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-172-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-141-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-142-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-144-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-146-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-148-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-151-0x00007FFA2DD50000-0x00007FFA2DD77000-memory.dmp

Filesize
156KB

Download
memory/3724-149-0x000002407FBA0000-0x000002407FBB0000-memory.dmp

Filesize
64KB

Download
memory/3724-174-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-154-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-156-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-158-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-160-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-162-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-164-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-166-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-168-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-140-0x00007FFA27D60000-0x00007FFA27EAE000-memory.dmp

Filesize
1.3MB

Download
memory/3724-133-0x000002407E950000-0x000002407EB16000-memory.dmp

Filesize
1.8MB

Download
memory/3724-152-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-176-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-178-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-180-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-182-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-184-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-186-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-188-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-190-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-192-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-194-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-196-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-198-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-200-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-202-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-204-0x000002401A690000-0x000002401A834000-memory.dmp

Filesize
1.6MB

Download
memory/3724-894-0x000002407FBA0000-0x000002407FBB0000-memory.dmp

Filesize
64KB

Download
memory/3724-896-0x00007FFA2DD50000-0x00007FFA2DD77000-memory.dmp

Filesize
156KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads