General
- Target AnyDesk.exe
- Size 8.0MB
- Sample260807-pmxzfavgnh
- SHA256 b3e2fff740c95f16af5310242bd2af0de71002d2c1ef3a8ff3802a1ef7fa5fb4
- MD5 5a489807188a9c4e34086ca2c08cd6eb
- SHA1 585d8e6ff54717241f808fee7daa9b29eeafa00a
- SHA512 b7476c2ac1636fcec1e6cce15fb192b24b11f22858edf8bcbbeacc1a84953dc6ba24c46c890f23dd4fac925c4122ea836a3492d6c4250bb89dfccd67f6d6868c
- SSDEEP 196608:+sErcUQW1VVc9C4q8smAxJSV1bc7GMMkCW6:+jrcU31QFU8kZS
- TLSH T10986334783C9C064F1A26632B759FD13E3C99DD8963348D744C6E106EEF36A9A96FC80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk.exe
Resource
win11ltsc2024-20260709-en
21 signatures
600 seconds
Malware Config
Targets
-
- Target AnyDesk.exe
- Size 8.0MB
- SHA256 b3e2fff740c95f16af5310242bd2af0de71002d2c1ef3a8ff3802a1ef7fa5fb4
- MD5 5a489807188a9c4e34086ca2c08cd6eb
- SHA1 585d8e6ff54717241f808fee7daa9b29eeafa00a
- SHA512 b7476c2ac1636fcec1e6cce15fb192b24b11f22858edf8bcbbeacc1a84953dc6ba24c46c890f23dd4fac925c4122ea836a3492d6c4250bb89dfccd67f6d6868c
- SSDEEP 196608:+sErcUQW1VVc9C4q8smAxJSV1bc7GMMkCW6:+jrcU31QFU8kZS
- TLSH T10986334783C9C064F1A26632B759FD13E3C99DD8963348D744C6E106EEF36A9A96FC80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory