General
-
Target
rustdesk-host%3Drust.wizardit.ru%2Ckey%3DTY0ckuawZ6pHMpPlTCeB6yDAjmRpa61nHwzygS54jDw%3D.exe
-
Size
19.8MB
-
Sample
231206-s1aylsff29
-
MD5
7caa1ef1cdeabb6c7487d66bd172fcf8
-
SHA1
a95d7098080fc3994ab434c2a5c4ec8f85817b11
-
SHA256
23b661d7bc171cd500d5096456905283ffe06479582b62d3bd5066633935d43e
-
SHA512
d4d13f539ce2e6177be3c06bab29fb69964424176a5f7573f27bfcdf87fe73b9b522182460331523f1421c0490e4c95b3a864eb9152df8bca7957916b85c5ae1
-
SSDEEP
393216:Mdvr3DHhPWjmUASYlYLGE3+6Pdj/uVDVU3LLHf36WAaS:SzTHhOjCl3b6F85UbL/36WAz
Static task
static1
Behavioral task
behavioral1
Sample
rustdesk-host%3Drust.wizardit.ru%2Ckey%3DTY0ckuawZ6pHMpPlTCeB6yDAjmRpa61nHwzygS54jDw%3D.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
rustdesk-host%3Drust.wizardit.ru%2Ckey%3DTY0ckuawZ6pHMpPlTCeB6yDAjmRpa61nHwzygS54jDw%3D.exe
Resource
win10v2004-20231201-en
Malware Config
Targets
-
-
Target
rustdesk-host%3Drust.wizardit.ru%2Ckey%3DTY0ckuawZ6pHMpPlTCeB6yDAjmRpa61nHwzygS54jDw%3D.exe
-
Size
19.8MB
-
MD5
7caa1ef1cdeabb6c7487d66bd172fcf8
-
SHA1
a95d7098080fc3994ab434c2a5c4ec8f85817b11
-
SHA256
23b661d7bc171cd500d5096456905283ffe06479582b62d3bd5066633935d43e
-
SHA512
d4d13f539ce2e6177be3c06bab29fb69964424176a5f7573f27bfcdf87fe73b9b522182460331523f1421c0490e4c95b3a864eb9152df8bca7957916b85c5ae1
-
SSDEEP
393216:Mdvr3DHhPWjmUASYlYLGE3+6Pdj/uVDVU3LLHf36WAaS:SzTHhOjCl3b6F85UbL/36WAz
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-