General
- Target rustdesk-host=gateway.network26.com,key=dv7BFGROJbEQ93eOcRffzyc3BsVu0GzLiuozNqLWmpw=.exe
- Size 23.3MB
- Sample260903-pm2bvsgp8x
- SHA256 eaedeb0088e687bf46f7c46a9c6ea5493ce51f3134dfd6acbedb47b5b9136274
- MD5 3dcd83c485b9fbc53d7d56fb9d4585f0
- SHA1 16510df7792f178932e964180d277ce0414d3f03
- SHA512 54f5635928b61a09b8897664397965ea21d098c503fd88d4aac62a8bb30f012ce62e4405100322e3dd4533b68e16945b162f9784f873f2a7e8526503f89def68
- SSDEEP 393216:tRjHllxmdlrzd1Wn6xOjAZ8WSI4AtJRA82xXphKiCwqFf4vIr5wFndQOqv4CDIV3:LjF+dxzd1Wn6bZfPtJRAVhKiVqFwvwSB
- TLSH T177373360F25515F9E51BC43092425AB2A73ABC754B107CFB11A871263F7AAF01F3B7A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rustdesk-host=gateway.network26.com,key=dv7BFGROJbEQ93eOcRffzyc3BsVu0GzLiuozNqLWmpw=.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
rustdesk-host=gateway.network26.com,key=dv7BFGROJbEQ93eOcRffzyc3BsVu0GzLiuozNqLWmpw=.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target rustdesk-host=gateway.network26.com,key=dv7BFGROJbEQ93eOcRffzyc3BsVu0GzLiuozNqLWmpw=.exe
- Size 23.3MB
- SHA256 eaedeb0088e687bf46f7c46a9c6ea5493ce51f3134dfd6acbedb47b5b9136274
- MD5 3dcd83c485b9fbc53d7d56fb9d4585f0
- SHA1 16510df7792f178932e964180d277ce0414d3f03
- SHA512 54f5635928b61a09b8897664397965ea21d098c503fd88d4aac62a8bb30f012ce62e4405100322e3dd4533b68e16945b162f9784f873f2a7e8526503f89def68
- SSDEEP 393216:tRjHllxmdlrzd1Wn6xOjAZ8WSI4AtJRA82xXphKiCwqFf4vIr5wFndQOqv4CDIV3:LjF+dxzd1Wn6bZfPtJRAVhKiVqFwvwSB
- TLSH T177373360F25515F9E51BC43092425AB2A73ABC754B107CFB11A871263F7AAF01F3B7A8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL