General
- Target AnyDesk.exe
- Size 7.9MB
- Sample260712-ay2pfabw5k
- SHA256 546ac7cb772e0d604c678e154ab5036fe2112962e047d39c149177a636e63629
- MD5 ea86938cd76e6e321eafa646b65b19dc
- SHA1 f7bec9f1dd72a37474ce434d5ce818c893cefb96
- SHA512 14ea42b846f907b33deb5569cf57aa04134bc6e5c440347555370a6d2be861d07d6550148e998a842da3cbb374b01e065c81b755ee60120200036359006bee4f
- SSDEEP 196608:6QOXGFH/pZZCQe+ruOSDd87s6n8prCqAUu1MfUpo:6/WpcQFuLp8g6n8prChq8K
- TLSH T1C686331293CC83D2C8538873A7859E1586233FE856A3B4EE5F81A3FFB6677153661C18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
AnyDesk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target AnyDesk.exe
- Size 7.9MB
- SHA256 546ac7cb772e0d604c678e154ab5036fe2112962e047d39c149177a636e63629
- MD5 ea86938cd76e6e321eafa646b65b19dc
- SHA1 f7bec9f1dd72a37474ce434d5ce818c893cefb96
- SHA512 14ea42b846f907b33deb5569cf57aa04134bc6e5c440347555370a6d2be861d07d6550148e998a842da3cbb374b01e065c81b755ee60120200036359006bee4f
- SSDEEP 196608:6QOXGFH/pZZCQe+ruOSDd87s6n8prCqAUu1MfUpo:6/WpcQFuLp8g6n8prChq8K
- TLSH T1C686331293CC83D2C8538873A7859E1586233FE856A3B4EE5F81A3FFB6677153661C18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.