General
-
Target
anydesk.exe
-
Size
9.5MB
-
Sample
241226-j4ld3s1lak
-
MD5
4943aa37911a76d77390059b6b2f8704
-
SHA1
12070bf6a7785bd393e679b31e32063329c0f939
-
SHA256
4d37269d55928ea2bb9f3cf1418ce83dd7a503ae727fa7d8ce6b2cbfb838d674
-
SHA512
4065969cbf0c2156b91dc03f24442200ef514219957504a02d7a94644c9f32690f23404ce485b682dda67a7417ccb459b0bee36c5843751387437ec09bd6fda1
-
SSDEEP
98304:tOztpWZf9b7yyJ+e/RsgqAN9wTkOEgV7FB21Qui5ja:ADuf99D+gqANqTkrgQXi5ja
Behavioral task
behavioral1
Sample
anydesk.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
anydesk.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
skuld
https://discord.com/api/webhooks/1321751397909266482/g6p2gp5GLsLQd3TtRPN7ZZFnwJd1ar-ylig_2KHoaztyjQEDx4U65lwKPQRwKMm4-9CS
Targets
-
-
Target
anydesk.exe
-
Size
9.5MB
-
MD5
4943aa37911a76d77390059b6b2f8704
-
SHA1
12070bf6a7785bd393e679b31e32063329c0f939
-
SHA256
4d37269d55928ea2bb9f3cf1418ce83dd7a503ae727fa7d8ce6b2cbfb838d674
-
SHA512
4065969cbf0c2156b91dc03f24442200ef514219957504a02d7a94644c9f32690f23404ce485b682dda67a7417ccb459b0bee36c5843751387437ec09bd6fda1
-
SSDEEP
98304:tOztpWZf9b7yyJ+e/RsgqAN9wTkOEgV7FB21Qui5ja:ADuf99D+gqANqTkrgQXi5ja
Score6/10-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1