Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
11-12-2023 22:45
Static task
static1
Behavioral task
behavioral1
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win10v2004-20231127-en
General
-
Target
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
-
Size
12.3MB
-
MD5
05faf8732ecbfe6dac79f748649948e7
-
SHA1
879d21ec37a6db70405c3de16a4d65449dba8bbb
-
SHA256
bc191c0f4732ab1dc3df89acbeb756e4fbd2ab821344da9214aa50eb5c4e34c5
-
SHA512
b6d140d7832df69b35c183845ba326ff629302df2458c5f73ed63e6db6236e761a40cecbf6a80718a7b3b4562879896daaedc548706c8c45425c3070f9bbd71b
-
SSDEEP
196608:DGhT/DrkkaMt+YMQ+R272Fd/Lh7lYjm4QyhfSwrqNz:DGphfMQOd/Ym4QyhfnrqNz
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2340 rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe 2340 rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe"C:\Users\Admin\AppData\Local\Temp\rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2340