Files named ToDesk_Lite.exe

lol.lsdo.top · ToDesk_Lite.exe

/

·

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC
lol.lsdo.top · ToDesk_Lite.exe

/

·

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC
down.airtacloud.com · ToDesk_Lite.exe

/app/

·

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: d471fec643f8be410de8fedabb457085191e3c02
SHA256: d57e486360ae034d47283a6b10c3624f98a46fdcaaf135092e0b1a1bdbb90b6b
application/octet-stream
10.71MB
2025-02-21 09:23:26 +0000 UTC
121.237.244.145 · ToDesk_Lite.exe

/#recycle/G-xrk/

China · Chinanet

SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
application/octet-stream
0.00B
2023-10-31 01:26:26 +0000 UTC
59.52.101.227 · ToDesk_Lite.exe

/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 8e90b4813895fe3e4b1fdf6c07eebb7c681d45f2
SHA256: 0f3b952da29d4b86c2a348e6c4da9e268be5cb5365908d69838d720433289020
application/octet-stream
10.70MB
2024-09-11 03:22:51 +0000 UTC
106.75.214.186 · ToDesk_Lite.exe

/xbzsg/

China · China Unicom Shanghai network

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: bc24ae7119acf18ccd6a1c4621bdf553bf846d34
SHA256: 1792cff644862bbbeef32dc35a983c9e7d16ce36a8212521f852448ac013040c
application/x-msdownload
15.38MB
2025-11-09 08:49:32 +0000 UTC
14.153.162.105 · ToDesk_Lite.exe

/download/todesk/old/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: f396a7c5c7826a4fda56c2b7c3a065e7a62cf02e
SHA256: d44e1d013c60ef2f33dfb10e81d5301cfcdd37f73be50c23fffe1f9085d98aff
application/octet-stream
9.68MB
2023-08-29 04:03:29 +0000 UTC
111.75.211.236 · ToDesk_Lite.exe

/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 8e90b4813895fe3e4b1fdf6c07eebb7c681d45f2
SHA256: 0f3b952da29d4b86c2a348e6c4da9e268be5cb5365908d69838d720433289020
application/octet-stream
10.70MB
2024-09-11 03:22:51 +0000 UTC
223.83.136.89 · ToDesk_Lite.exe

/

China · China Mobile communications corporation

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 8e90b4813895fe3e4b1fdf6c07eebb7c681d45f2
SHA256: 0f3b952da29d4b86c2a348e6c4da9e268be5cb5365908d69838d720433289020
application/octet-stream
10.70MB
2024-09-11 03:22:51 +0000 UTC
183.128.90.56 · ToDesk_Lite.exe

/个人/ZZQ/工具/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: f6b1036af5606edad59423bb48d1f63912ce460f
SHA256: b506fdbc2c96d1e9f8abb12e74b47def6ff91c0ca552bc7f0aa4f39f840fc2c0
application/octet-stream
11.05MB
2025-08-20 09:42:58 +0000 UTC
61.238.115.92 · ToDesk_Lite.exe

/1远程协助软件/

Hong Kong · HK Broadband Network Ltd.

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: bc24ae7119acf18ccd6a1c4621bdf553bf846d34
SHA256: 1792cff644862bbbeef32dc35a983c9e7d16ce36a8212521f852448ac013040c
application/octet-stream
15.38MB
2025-11-20 06:15:05 +0000 UTC
59.55.114.31 · ToDesk_Lite.exe

/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 8e90b4813895fe3e4b1fdf6c07eebb7c681d45f2
SHA256: 0f3b952da29d4b86c2a348e6c4da9e268be5cb5365908d69838d720433289020
application/octet-stream
10.70MB
2024-09-11 03:22:51 +0000 UTC
14.153.162.194 · ToDesk_Lite.exe

/download/todesk/old/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: f396a7c5c7826a4fda56c2b7c3a065e7a62cf02e
SHA256: d44e1d013c60ef2f33dfb10e81d5301cfcdd37f73be50c23fffe1f9085d98aff
application/octet-stream
9.68MB
2023-08-29 04:03:29 +0000 UTC
61.238.115.92 · ToDesk_Lite.exe

/1远程协助软件/

Hong Kong · HK Broadband Network Ltd.

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 8dd33649e4130b3ad37c8a6cf66b5ab02db73c4a
SHA256: dfd767c247d1fe31af39eb9649229a5fd733512c683fe72f277317f8a5229956
application/octet-stream
11.77MB
2025-10-12 13:52:54 +0000 UTC
down.airtacloud.com · ToDesk_Lite.exe

/app/

· CLOUDFLARENET

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: d471fec643f8be410de8fedabb457085191e3c02
SHA256: d57e486360ae034d47283a6b10c3624f98a46fdcaaf135092e0b1a1bdbb90b6b
application/octet-stream
10.71MB
2025-02-21 09:23:26 +0000 UTC
lol.lsdo.top · ToDesk_Lite.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC
lol.lsdo.top · ToDesk_Lite.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC
down.airtacloud.com · ToDesk_Lite.exe

/app/

· CLOUDFLARENET

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: d471fec643f8be410de8fedabb457085191e3c02
SHA256: d57e486360ae034d47283a6b10c3624f98a46fdcaaf135092e0b1a1bdbb90b6b
application/octet-stream
10.71MB
2025-02-21 09:23:26 +0000 UTC
lol.lsdo.top · ToDesk_Lite.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC
lol.lsdo.top · ToDesk_Lite.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 79438291afcce4771488d755f519db31f71f79b0
SHA256: b5a1417ae50dc842b4a85d563664098f7c1ea69fa605215859d6ccf83b1566b8
application/octet-stream
10.66MB
2024-08-13 09:31:02 +0000 UTC