Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2023, 14:41

General

  • Target

    AnyDesk.exe

  • Size

    2.9MB

  • MD5

    eafba56f876c04229c33c88a0bd964fa

  • SHA1

    d34f886a895f190c8a2d1bf4e46cbf104358126c

  • SHA256

    76c77a70b8ff02ec28049a28fdb538a5d663f548b48e9a449371edd4c414a15e

  • SHA512

    80e3dc784a25d86a3a63032ab6f66e39484e3c480b4cc94dba2d63f0f9897ac1fcd86482f5c8b078639aba617e35d20c0938c6f58869f4bc4402bc8229d46b21

  • SSDEEP

    49152:AAOdl4d7NHNUb75uEEbOyYWHxL9X5zT/dRSAUA/J:Zl8DFWH1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe
    "C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\UltraVNC.ini

          Filesize

          413B

          MD5

          e3559e2fc73d983b7154354fa1b90339

          SHA1

          76b5dd42405618d690e96995d75d5e77b12b3bab

          SHA256

          facf2d00dfacdab9eeff56e5fc725fc185dbbb3c28dc268ac8c62c34481a1df3

          SHA512

          204989a075dbdc33a760be1cd80593c87bf6cfc8397f9e965aaed476777c6fb08edbae410e804b06f07e9392c42b0048f0abaa6651d69030d2ee2bced869c3ba

        • C:\Users\Admin\AppData\Local\Temp\UltraVNC.ini

          Filesize

          1KB

          MD5

          5de738254ad67c06caa5dfd631b2aa7e

          SHA1

          65a9f0dd1f1c83cce7fa1e2fec2f736db55d1c13

          SHA256

          9c44c7330620081b178461c4347ccdb9ed4d2da0629db64fca153c88dc8ec3de

          SHA512

          d620eaee957145b6c9bd887aa6191065619a9da8374b18c25699cf197f703ed2a4c2a2247e8702a2e67e6b4693ce73f391e6d6cd36eac08da581a8483f1b4611

        • C:\Users\Admin\AppData\Local\Temp\UltraVNC.ini

          Filesize

          1KB

          MD5

          5de738254ad67c06caa5dfd631b2aa7e

          SHA1

          65a9f0dd1f1c83cce7fa1e2fec2f736db55d1c13

          SHA256

          9c44c7330620081b178461c4347ccdb9ed4d2da0629db64fca153c88dc8ec3de

          SHA512

          d620eaee957145b6c9bd887aa6191065619a9da8374b18c25699cf197f703ed2a4c2a2247e8702a2e67e6b4693ce73f391e6d6cd36eac08da581a8483f1b4611