Resubmissions

15-08-2024 21:32

240815-1dktaszfkn 10

General

  • Target

    AnyDesk.exe

  • Size

    103.5MB

  • MD5

    9e857f915a409090f09143ce302bbc3b

  • SHA1

    86af96f5aab9fa8aed4dce26da8af2bea36ecaee

  • SHA256

    acdf571ce148a70121edc7b8a2bac60cbbea31a4dbc99d95d6cc334159c026ab

  • SHA512

    b059c25aca64f292d9e5a38c063eb61f9075089c1418465703e09a24cbcf8c95c40db867b0d080c93044e4d663b5bf42f5a806e2a5cecd196f87931b2a6d0240

  • SSDEEP

    3145728:SCOb8S6xjKcBaIc2qHO5iVIinGQbRe0zJcBqW7jr5to:QgSWNaIsHCip1XcBqW7j

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AnyDesk.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234


    Headers

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc