Overview

overview

7

Static

static

3

ares/AnyDe...S).exe

windows7-x64

7

ares/AnyDe...S).exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ares.zip

  • Size

    9.5MB

  • Sample

    240723-nc2zzatdql

  • MD5

    cdf6871fba9312dd250c6f67c1f0cc90

  • SHA1

    f2f9e6808018244080928f1d3c4d772245b7a79b

  • SHA256

    24fd25f7c29e38f8c0ca405d5d1ad01332e04f9f4de79cedcbade64eeeb4f81f

  • SHA512

    4d21bbf201a8b9f3acb95632a2cfab7cb7b152b1673f84a874e42211af07a879c4ec491a0592d40788aba8205948728498da510e953a39a4c685d54ecbbc4270

  • SSDEEP

    196608:m8QQ+AZ/LGndV+mVQxsA1JfyS9CC2ntfAexjPI3aT2tLiz9Q:m8QS0dV3Qxs6JfCCKqWPIdey

Score
7/10
agilenet

Malware Config

Targets

    • Target

      ares/AnyDesk (ARES).exe

    • Size

      9.5MB

    • MD5

      33b25341be43c3772804c2c202042ec7

    • SHA1

      a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b

    • SHA256

      2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe

    • SHA512

      0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba

    • SSDEEP

      196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC

    Score
    7/10
    agilenet

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks