General
- Target AnyDesk (MANGO LATEST).exe
- Size 1.8MB
- Sample261104-2yecpavyhw
- SHA256 2b39e6aaaf0236925175a16f8c0b69b4f59ec298e09c74cac3aa7f89b352374f
- MD5 87c2218ec8cb9e9c50d0eacdb60f1f4f
- SHA1 ffd0b860c9805ab591b1536e881e6302a729fff5
- SHA512 080bcbd9eeb414a3ce8f7c635082944c6481663f8c25ec5e186891ca6a2fc4be2d99b7cc4da00bc2584e55e8ab30bedd809a6aeb5e34c2bfeb905420f7666e1b
- SSDEEP 49152:GxeSA72PbxqYB4hsVXuRjRzeGxqlegrAq:yxA7MEYmy9eZeGVgr
- TLSH T114852310BFDCC159C1624F79FCBC679C06BAA1C6AC329BAA71644E0F4756F444E6233A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AnyDesk (MANGO LATEST).exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
AnyDesk (MANGO LATEST).exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target AnyDesk (MANGO LATEST).exe
- Size 1.8MB
- SHA256 2b39e6aaaf0236925175a16f8c0b69b4f59ec298e09c74cac3aa7f89b352374f
- MD5 87c2218ec8cb9e9c50d0eacdb60f1f4f
- SHA1 ffd0b860c9805ab591b1536e881e6302a729fff5
- SHA512 080bcbd9eeb414a3ce8f7c635082944c6481663f8c25ec5e186891ca6a2fc4be2d99b7cc4da00bc2584e55e8ab30bedd809a6aeb5e34c2bfeb905420f7666e1b
- SSDEEP 49152:GxeSA72PbxqYB4hsVXuRjRzeGxqlegrAq:yxA7MEYmy9eZeGVgr
- TLSH T114852310BFDCC159C1624F79FCBC679C06BAA1C6AC329BAA71644E0F4756F444E6233A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.