General
- Target AnyDesk.exe
- Size 8.2MB
- Sample261030-c1ry5ada93
- SHA256 979a295b6a68881c9ae7a70c7ba117c26316ecdf9d6afa9dd66b048225df5de9
- MD5 93fc27429f888bb76afa88f87b0253e9
- SHA1 67c0a8c51fd7007d08bdc40c3b55cc18bae17d76
- SHA512 e86822800aad967b9bb2be5a40d2f2b1fb9eb035932a8c2befc2bcae5a0e474eeea5a109f2c5552c763712c509493978d2f78677d55cd870229ed798cea274c9
- SSDEEP 196608:bmxUsIZqEAKLCkRS7pVGFs7ELJYIP5b/U8s0qUotP9:bUUs+qRxx7EhBlMntP9
- TLSH T1DE86330E275498A3E9C27437517EC2967DF091BC8EB124CE3D65F0DA62FBC9B2146AD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk.exe
Resource
win11ltsc2024-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target AnyDesk.exe
- Size 8.2MB
- SHA256 979a295b6a68881c9ae7a70c7ba117c26316ecdf9d6afa9dd66b048225df5de9
- MD5 93fc27429f888bb76afa88f87b0253e9
- SHA1 67c0a8c51fd7007d08bdc40c3b55cc18bae17d76
- SHA512 e86822800aad967b9bb2be5a40d2f2b1fb9eb035932a8c2befc2bcae5a0e474eeea5a109f2c5552c763712c509493978d2f78677d55cd870229ed798cea274c9
- SSDEEP 196608:bmxUsIZqEAKLCkRS7pVGFs7ELJYIP5b/U8s0qUotP9:bUUs+qRxx7EhBlMntP9
- TLSH T1DE86330E275498A3E9C27437517EC2967DF091BC8EB124CE3D65F0DA62FBC9B2146AD0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects KillMBR
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1