General
-
Target
Ares.zip
-
Size
9.5MB
-
Sample
240723-nc2zzatdql
-
MD5
cdf6871fba9312dd250c6f67c1f0cc90
-
SHA1
f2f9e6808018244080928f1d3c4d772245b7a79b
-
SHA256
24fd25f7c29e38f8c0ca405d5d1ad01332e04f9f4de79cedcbade64eeeb4f81f
-
SHA512
4d21bbf201a8b9f3acb95632a2cfab7cb7b152b1673f84a874e42211af07a879c4ec491a0592d40788aba8205948728498da510e953a39a4c685d54ecbbc4270
-
SSDEEP
196608:m8QQ+AZ/LGndV+mVQxsA1JfyS9CC2ntfAexjPI3aT2tLiz9Q:m8QS0dV3Qxs6JfCCKqWPIdey
Static task
static1
Behavioral task
behavioral1
Sample
ares/AnyDesk (ARES).exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ares/AnyDesk (ARES).exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
ares/AnyDesk (ARES).exe
-
Size
9.5MB
-
MD5
33b25341be43c3772804c2c202042ec7
-
SHA1
a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b
-
SHA256
2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe
-
SHA512
0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba
-
SSDEEP
196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC
Score7/10-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-