General

  • Target

    AnyDesk.exe

  • Size

    1.2MB

  • Sample

    241126-hzcqpszqaw

  • MD5

    bceea9753420a675af68cda43864438e

  • SHA1

    0823f156da4f106a26b5738cf9f732d5dd68cdd8

  • SHA256

    b6a6a59c8b8387233be03bb2111830d4e8aafec6a62a290090ae75cbff5736ec

  • SHA512

    8dcd35be032e853bc785615e63993deb71fa2ef35a20db9427c2a281f20ea4768b3754b4887d212cc5867ee36e470d47e33a7333cc9ca0a22196ff8371e51490

  • SSDEEP

    24576:Ien4s+Jv82wO5m5jAyTgz1Camim9U/ZxvneUy6/1D+TzxF1Yb:IG+cc5z1CadUUXtSTr

Malware Config

Targets

    • Target

      AnyDesk.exe

    • Size

      1.2MB

    • MD5

      bceea9753420a675af68cda43864438e

    • SHA1

      0823f156da4f106a26b5738cf9f732d5dd68cdd8

    • SHA256

      b6a6a59c8b8387233be03bb2111830d4e8aafec6a62a290090ae75cbff5736ec

    • SHA512

      8dcd35be032e853bc785615e63993deb71fa2ef35a20db9427c2a281f20ea4768b3754b4887d212cc5867ee36e470d47e33a7333cc9ca0a22196ff8371e51490

    • SSDEEP

      24576:Ien4s+Jv82wO5m5jAyTgz1Camim9U/ZxvneUy6/1D+TzxF1Yb:IG+cc5z1CadUUXtSTr

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks