General
- Target Exelon.zip
- Size 3.3MB
- Sample260626-whe2dsdy6l
- SHA256 dd74f26833b22f851242a501aea623d5f92bca2b20b4bb091a3be568bc33ccc0
- MD5 235a8ba5282bcc3ea32bd69fcfaa63f8
- SHA1 014d38df3c850711565f47b2e122ba272fc09b00
- SHA512 224235cb98268dc26ec9c4b8a17ec46ae7672c17b379439b0421720828c366afd620eec5b6e8d9d979b66be15aaae1ca1fe121ffc0e63dcfbcddf817f13a5979
- SSDEEP 98304:CLc6fuv5mnflzSlmJa6To+te3LLBzoWM1OB9Wnts8t0hzo7wTM2fqU:CaMflzSfCgL2QBqr0a7vA7
- TLSH T1F2F533F5241CE3D050E5FED9C49A18C21234B2A3D324EF972E51B87AB67D5B12217EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk (EXELON) 1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AnyDesk (EXELON) 1.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
AnyDesk (EXELON) 2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AnyDesk (EXELON) 2.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
AnyDesk (EXELON) 3.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
AnyDesk (EXELON) 3.exe
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target AnyDesk (EXELON) 1.exe
- Size 1.3MB
- SHA256 e9ebcc9d6b62ceb889dac85e330a497d898e7e3ebe59b19d2ed3f75bc9c4ff1f
- MD5 5ed48f8446aadd8ac30cf3199e79fc52
- SHA1 b9e80d72d5962cc2be59568aeffcc906247bd818
- SHA512 b8fc8933115af40d0f3bb7ecfb2e2199c051443e96fed707617736064145471d796e7a2754233a2534fd7d5ed83ab5f278f4202b1c4af2dc752e8f364a1b022d
- SSDEEP 24576:KyW1Ibz0BjHJjlgbwwC/8j0y2kdf8FN7BZxgBarOEpOnjgnyWEzR1:KycYz+Jjlywwu4/d8ZlO
- TLSH T12D55E0493BACDE5BC24C0BBCD9AD47A053F0D8685A63D703610891B57F633B8AF46297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target AnyDesk (EXELON) 2.exe
- Size 1.3MB
- SHA256 ca4918747cf647870399f082849146c4de0ebb1d88c50ff0831a580dc1f7b99e
- MD5 2b81d20519f206b3a2c63d9dcd7bb724
- SHA1 14fefc5362ef3be3d2f59b834d5ad5a33118056c
- SHA512 d5bb55ee64dc0ec0e2faafb063df9b88d2a436926c34360ee66c2d8dfdd03c175f4e2e9afe9d1cff845e873ead0e1fbab94ac5295ea488634274b55766f4190d
- SSDEEP 24576:fQemedsZ5uJ4FbMMkxP9Dr/dW1GOAxqIiltDPTjsg6Il9NpO3KoDC+GkcoXtJuUe:oXeSje4NMM4xrleWqIizP3sMl9NUaoDv
- TLSH T13155F15ABBD8CF97C14C877DDAA50BB173B0ED397A6BE70B102455A82D4336CAF4104A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target AnyDesk (EXELON) 3.exe
- Size 1.3MB
- SHA256 464f5f7c802939d7b5753cfcf51180e1ce6678bbe96a1ccd2717e49cc48e2854
- MD5 72e89e69385280ebebe27bab29a7758d
- SHA1 fef4a8f1033fa2dcaa2e6f67c75b927bfa6eda2c
- SHA512 c787d4f95f7fd0d94dbb85c9d3f114ad084359c49e5a8f7eb069e0f33e2d0d1c3e63862320e431aaeb1780ae7c33bcfb4ce1cfe6547f2bf723a3039d976b94a3
- SSDEEP 24576:bhgc72LsfMMWnPwwNETev1jpvrYLJqh+EvS3GSQvQAl8fr:bhgN8/WnPwwNEevue7vSnQv3
- TLSH T13355E00A33C8EEA3C0490F7EDEA64FB423B4E1656B63E717215D667A6F133689F44142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.