General
- Target Ares.zip
- Size 9.5MB
- Sample240723-nc2zzatdql
- SHA256 24fd25f7c29e38f8c0ca405d5d1ad01332e04f9f4de79cedcbade64eeeb4f81f
- MD5 cdf6871fba9312dd250c6f67c1f0cc90
- SHA1 f2f9e6808018244080928f1d3c4d772245b7a79b
- SHA512 4d21bbf201a8b9f3acb95632a2cfab7cb7b152b1673f84a874e42211af07a879c4ec491a0592d40788aba8205948728498da510e953a39a4c685d54ecbbc4270
- SSDEEP 196608:m8QQ+AZ/LGndV+mVQxsA1JfyS9CC2ntfAexjPI3aT2tLiz9Q:m8QS0dV3Qxs6JfCCKqWPIdey
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ares/AnyDesk (ARES).exe
Resource
win7-20240708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ares/AnyDesk (ARES).exe
Resource
win10v2004-20240709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ares/AnyDesk (ARES).exe
- Size 9.5MB
- SHA256 2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe
- MD5 33b25341be43c3772804c2c202042ec7
- SHA1 a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b
- SHA512 0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba
- SSDEEP 196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC
- MD5 SHA1 SHA512 SSDEEP
Score7/10Loads dropped DLL
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.