Resubmissions

21-09-2024 21:49

240921-1pvsmswbnc 7

21-09-2024 21:49

240921-1pnpbswbmd 1

21-09-2024 21:49

240921-1pbd1awbkd 1

General

  • Target

    rustdesk-1.3.1-x86_64.exe

  • Size

    20.8MB

  • Sample

    240921-1pvsmswbnc

  • MD5

    141be4755517fc72c9bb3bc4efaadbfb

  • SHA1

    e460a4fe639730302d8718ff6d5f2b679b6502e6

  • SHA256

    fc20fd159eea217fa8ba30309aef177ec00913007f42b325e6b7dd1f21a2f245

  • SHA512

    4f223cda176d974882bb0647b2e32a90d3cd6fb5595423dda1fb442966977aa3e42c47a9c711bd36c8f1ba345ff596755c2ffcdcbdcd55f1940330239d2e322a

  • SSDEEP

    393216:xWgm1PDyiqYWl07NAJkdzs297RK5OYyDCy8EVJNuVMTkD4A:xjm1Lytsae5I/ANuS8r

Score
7/10

Malware Config

Targets

    • Target

      rustdesk-1.3.1-x86_64.exe

    • Size

      20.8MB

    • MD5

      141be4755517fc72c9bb3bc4efaadbfb

    • SHA1

      e460a4fe639730302d8718ff6d5f2b679b6502e6

    • SHA256

      fc20fd159eea217fa8ba30309aef177ec00913007f42b325e6b7dd1f21a2f245

    • SHA512

      4f223cda176d974882bb0647b2e32a90d3cd6fb5595423dda1fb442966977aa3e42c47a9c711bd36c8f1ba345ff596755c2ffcdcbdcd55f1940330239d2e322a

    • SSDEEP

      393216:xWgm1PDyiqYWl07NAJkdzs297RK5OYyDCy8EVJNuVMTkD4A:xjm1Lytsae5I/ANuS8r

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks