465e3cc0befa33ef54db3819d224e19cffe684cfe687c76b43352f5bb9c2d87e | Triage

Resubmissions

20-11-2024 19:44

241120-yft4mssjc1 4

20-11-2024 19:30

241120-x7479a1rev 8

Sharing

General

Target

rustdesk-1.3.2-x86_64.exe
Size

20.8MB
Sample

241120-x7479a1rev
MD5

aa6d18e1405a0be5eff04d419f9c6bbe
SHA1

30ed558a8804b5f826a3ca4a1c2212de58e6030a
SHA256

465e3cc0befa33ef54db3819d224e19cffe684cfe687c76b43352f5bb9c2d87e
SHA512

b4afce979135252b09b363b06461ab943f0f3a35e0f60bcaee49727f133904e8269faa7ddee73026ca28e6412e59bb50d802ebe15415b6bf1e022e177ef22168
SSDEEP

393216:wm5lerU7OybbyfqdBYk+uDJC8PCuNnoUvGtN1PK7Ue+kis+:6rU7jfyCdD+t8PC4oUiJKIe+pB

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  rustdesk-1.3.2-x86_64.exe
- Size
  
  20.8MB
- MD5
  
  aa6d18e1405a0be5eff04d419f9c6bbe
- SHA1
  
  30ed558a8804b5f826a3ca4a1c2212de58e6030a
- SHA256
  
  465e3cc0befa33ef54db3819d224e19cffe684cfe687c76b43352f5bb9c2d87e
- SHA512
  
  b4afce979135252b09b363b06461ab943f0f3a35e0f60bcaee49727f133904e8269faa7ddee73026ca28e6412e59bb50d802ebe15415b6bf1e022e177ef22168
- SSDEEP
  
  393216:wm5lerU7OybbyfqdBYk+uDJC8PCuNnoUvGtN1PK7Ue+kis+:6rU7jfyCdD+t8PC4oUiJKIe+pB
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation