Overview

overview

10

Static

static

f9a0f4ae0d...12.exe

windows7_x64

10

f9a0f4ae0d...12.exe

windows10_x64

10

Resubmissions

10/11/2020, 09:13

201110-bm2ezhvdfx6

08/11/2020, 18:23

201108-cm8vq2t2w26

Sharing

Copy URL Twitter E-mail

General

  • Target
    f9a0f4ae0ddb62a451a82bf20d2937ee21c1742a9fac9533af0d99d2ef738212
  • Size 711KB
  • Sample201108-cm8vq2t2w2
  • SHA256 f9a0f4ae0ddb62a451a82bf20d2937ee21c1742a9fac9533af0d99d2ef738212
  • MD5 SHA1 SHA512
Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target
      f9a0f4ae0ddb62a451a82bf20d2937ee21c1742a9fac9533af0d99d2ef738212
    • Size 711KB
    • SHA256 f9a0f4ae0ddb62a451a82bf20d2937ee21c1742a9fac9533af0d99d2ef738212
    • MD5 SHA1 SHA512
    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks