Overview
overview
3Static
static
1Cisco AnyC...nt.zip
windows7-x64
1Cisco AnyC...nt.zip
windows10-2004-x64
1Cisco AnyC...cy.xml
windows7-x64
3Cisco AnyC...cy.xml
windows10-2004-x64
1Cisco AnyC...cy.xml
windows7-x64
3Cisco AnyC...cy.xml
windows10-2004-x64
1Cisco AnyC...am.bin
windows7-x64
3Cisco AnyC...am.bin
windows10-2004-x64
3Cisco AnyC...istory
windows7-x64
1Cisco AnyC...istory
windows10-2004-x64
1Cisco AnyC...f.temp
windows7-x64
3Cisco AnyC...f.temp
windows10-2004-x64
3Cisco AnyC...a2.cef
windows7-x64
3Cisco AnyC...a2.cef
windows10-2004-x64
3Cisco AnyC...og.txt
windows7-x64
1Cisco AnyC...og.txt
windows10-2004-x64
1Cisco AnyC...og.txt
windows7-x64
1Cisco AnyC...og.txt
windows10-2004-x64
1Cisco AnyC...og.txt
windows7-x64
1Cisco AnyC...og.txt
windows10-2004-x64
3Cisco AnyC...og.txt
windows7-x64
1Cisco AnyC...og.txt
windows10-2004-x64
1Cisco AnyC...og.txt
windows7-x64
1Cisco AnyC...og.txt
windows10-2004-x64
1Cisco AnyC...le.xml
windows7-x64
3Cisco AnyC...le.xml
windows10-2004-x64
1Cisco AnyC...le.xml
windows7-x64
3Cisco AnyC...le.xml
windows10-2004-x64
1Cisco AnyC...st.dat
windows7-x64
3Cisco AnyC...st.dat
windows10-2004-x64
3Cisco AnyC...nt.xml
windows7-x64
3Cisco AnyC...nt.xml
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Cisco AnyConnect Secure Mobility Client.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Cisco AnyConnect Secure Mobility Client.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xml
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xml
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Cisco AnyConnect Secure Mobility Client/ConfigParam.bin
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Cisco AnyConnect Secure Mobility Client/ConfigParam.bin
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/history
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/history
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/moduledata/vpn.cef.temp
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/moduledata/vpn.cef.temp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/outbound/feedback_data2.cef
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/outbound/feedback_data2.cef
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_084604_log.txt
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_084604_log.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_120634_log.txt
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_120634_log.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_182740_log.txt
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_182740_log.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_223751_log.txt
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_223751_log.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230314_095939_log.txt
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230314_095939_log.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Cisco AnyConnect Secure Mobility Client/Profile/AnyConnectProfile.xml
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Cisco AnyConnect Secure Mobility Client/Profile/AnyConnectProfile.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Cisco AnyConnect Secure Mobility Client/Profile/MgmtTun/AnyConnectProfile.xml
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Cisco AnyConnect Secure Mobility Client/Profile/MgmtTun/AnyConnectProfile.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Cisco AnyConnect Secure Mobility Client/VPNManifest.dat
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Cisco AnyConnect Secure Mobility Client/VPNManifest.dat
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Cisco AnyConnect Secure Mobility Client/VPNManifestClient.xml
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Cisco AnyConnect Secure Mobility Client/VPNManifestClient.xml
Resource
win10v2004-20240802-en
General
-
Target
Cisco AnyConnect Secure Mobility Client.zip
-
Size
33KB
-
MD5
d7e780371036d40d0a6005f22b09fc7f
-
SHA1
3fb620f8046e9bd24474992b7c42d3e9e3c3e3e8
-
SHA256
f93f6446161f86711bb26b7a23f1e133a84ef25afff6854de629d1d4512956c0
-
SHA512
7efc44fe587a4593b8a386493c693064eb25a472907cf9d46ca9d4d361423ae0f536014b62ba0e9e51b2465a4c5c96194eac9e9e7bee32d1194cc496da0841bf
-
SSDEEP
768:CyWg9YGZW0voJMsDdROk5Tojv6fLgJMsDdROk5Tojv6fLKL5:Clg9YIgOnS5gOnSOL5
Malware Config
Signatures
Files
-
Cisco AnyConnect Secure Mobility Client.zip.zip
-
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xml.xml
-
Cisco AnyConnect Secure Mobility Client/AnyConnectLocalPolicy.xsd.xml
-
Cisco AnyConnect Secure Mobility Client/ConfigParam.bin
-
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/history
-
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/moduledata/vpn.cef.temp
-
Cisco AnyConnect Secure Mobility Client/CustomerExperienceFeedback/outbound/feedback_data2.cef
-
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_084604_log.txt
-
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_120634_log.txt
-
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_182740_log.txt
-
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230313_223751_log.txt
-
Cisco AnyConnect Secure Mobility Client/Logs/UpdateHistory_20230314_095939_log.txt
-
Cisco AnyConnect Secure Mobility Client/Profile/AnyConnectProfile.xsd.xml
-
Cisco AnyConnect Secure Mobility Client/Profile/MgmtTun/AnyConnectProfile.xsd.xml
-
Cisco AnyConnect Secure Mobility Client/VPNManifest.dat
-
Cisco AnyConnect Secure Mobility Client/VPNManifestClient.xml.xml
-
Cisco AnyConnect Secure Mobility Client/eula.txt
-
Cisco AnyConnect Secure Mobility Client/preferences_global.xml.xml
-
Cisco AnyConnect Secure Mobility Client/update.txt