Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
17/04/2023, 15:15
Static task
static1
Behavioral task
behavioral1
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win10v2004-20230220-en
General
-
Target
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
-
Size
12.3MB
-
MD5
05faf8732ecbfe6dac79f748649948e7
-
SHA1
879d21ec37a6db70405c3de16a4d65449dba8bbb
-
SHA256
bc191c0f4732ab1dc3df89acbeb756e4fbd2ab821344da9214aa50eb5c4e34c5
-
SHA512
b6d140d7832df69b35c183845ba326ff629302df2458c5f73ed63e6db6236e761a40cecbf6a80718a7b3b4562879896daaedc548706c8c45425c3070f9bbd71b
-
SSDEEP
196608:DGhT/DrkkaMt+YMQ+R272Fd/Lh7lYjm4QyhfSwrqNz:DGphfMQOd/Ym4QyhfnrqNz
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1276 rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe 1276 rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe"C:\Users\Admin\AppData\Local\Temp\rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1276
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
942B
MD5cd5ead983590d37546fbaab1f91bd55c
SHA174ed72f370c5482acc402f2d8d7ce2bdfb225186
SHA2565d9593cb673c46fcfa74e042601707c70dd8ead52be2fa16f797f9293e2256a7
SHA5124cf5fd4b2216484738a3dc62dd93b1056a760463ca1a3bd0c3d1281e3a359bbf6fd49f0d78ac6b130d7be2229f42256cb631c9becf0386ee54243b4dd0d92399