General

  • Target
    NеwInst_[UPD!].exe
  • Size 1.2MB
  • Sample250520-tybb2avpy2
  • SHA256 a083ba84f3ff9cc83191da42c43ade5a32d0bd39fd52ed18d79b493be800f918
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • NеwInst_[UPD!].exe
    .exe 1.2MB
  • $TEMP/Centre.flv
    22KB
  • $TEMP/Crown.flv
    54KB
  • HoLlc/Wiki.flv
    73KB
  • PitAvailability/Underlying.flv
    57KB
  • TryingMaintain/His.flv
    16KB
  • TryingMaintain/Maintenance.flv
    .cab 478KB
  • Chambers
    137KB
  • Domestic
    109KB
  • Genius
    71KB
  • Oct
    2KB
  • Pipeline
    58KB
  • Platform
    64KB
  • Ringtones
    22KB
  • Shoot
    128KB
  • Specifications
    72KB
  • Wives
    123KB
  • Www
    138KB
  • TryingMaintain/Myth.flv
    89KB
  • TryingMaintain/Pounds.flv
    91KB
  • TryingMaintain/Skills.flv
    64KB
  • TryingMaintain/Voip.flv
    66KB

NеwInst_[UPD!].exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 a083ba84f3ff9cc83191da42c43ade5a32d0bd39fd52ed18d79b493be800f918
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
ca:20:c7:11:d4:a2:41:a1:8b:3f:2f:72:2d:f3:2e:a8:f2:ee:06:6c:b8:ad:f6:6a:11:9b:7e:46:2d:d4:20:cc
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE

PE Signature issue

Digest
5c:78:be:63:3b:e2:d3:31:c0:a5:36:62:e8:b2:84:29:20:17:19:1e
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=AnyDesk Software GmbH,O=AnyDesk Software GmbH,L=Stuttgart,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
5
Entry point
13289
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths