Overview

overview

7

Static

static

3

rustdesk-h...Q=.exe

windows10-2004-x64

7

rustdesk-h...Q=.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    rustdesk-host=remote.mtc-server.de,key=gVUI62sIIEXmAkHhtBRYK8wumXkFQjxaLcL51uwqPnQ=.exe
  • Size 19.8MB
  • Sample260422-pp7awsfs2p
  • SHA256 23b661d7bc171cd500d5096456905283ffe06479582b62d3bd5066633935d43e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
backdoordefense_evasiondiscoveryrat

Malware Config

Targets

    • Target
      rustdesk-host=remote.mtc-server.de,key=gVUI62sIIEXmAkHhtBRYK8wumXkFQjxaLcL51uwqPnQ=.exe
    • Size 19.8MB
    • SHA256 23b661d7bc171cd500d5096456905283ffe06479582b62d3bd5066633935d43e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    backdoordefense_evasiondiscoveryrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • RustDesk remote access tool

      RustDesk is an open-source remote admin tool.

      backdoorrat

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks