Overview

overview

7

Static

static

1

ToDesk_Win_6.5.3.msi

windows7-x64

6

ToDesk_Win_6.5.3.msi

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ToDesk_Win_6.5.3.msi.v

  • Size

    106.3MB

  • Sample

    241002-bx5v5sthra

  • MD5

    c35a739a215927552c93499d6c8d8665

  • SHA1

    0e6241f007f00d461d39ec5940eb9535b73ffd61

  • SHA256

    91d8e570cb066a6f1071f8317582dce171f02b6b251b1f3ae0c05c3daed1cf76

  • SHA512

    f51242cdf99849ad9b54c529670aea3eb2a18c65b8b26474c4f1645f55bda1efed9fd64e10debc1f37886b0f5338092a97e2d99b4dc17368bb21be8525ec731b

  • SSDEEP

    3145728:b5VQYFW8BWuesWnkksidfvCDagHKABtUUYOSZ:dVK8teiwndgqstU

Score
7/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      ToDesk_Win_6.5.3.msi.v

    • Size

      106.3MB

    • MD5

      c35a739a215927552c93499d6c8d8665

    • SHA1

      0e6241f007f00d461d39ec5940eb9535b73ffd61

    • SHA256

      91d8e570cb066a6f1071f8317582dce171f02b6b251b1f3ae0c05c3daed1cf76

    • SHA512

      f51242cdf99849ad9b54c529670aea3eb2a18c65b8b26474c4f1645f55bda1efed9fd64e10debc1f37886b0f5338092a97e2d99b4dc17368bb21be8525ec731b

    • SSDEEP

      3145728:b5VQYFW8BWuesWnkksidfvCDagHKABtUUYOSZ:dVK8teiwndgqstU

    Score
    7/10
    discoverypersistenceprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks