Overview

overview

10

Static

static

10

b2ce33a1fb...63.exe

windows7_x64

10

b2ce33a1fb...63.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2ce33a1fbc3e1eb535eafa0c78a7563

  • Size

    9.0MB

  • Sample

    201214-dwwmep3w9j

  • MD5

    b2ce33a1fbc3e1eb535eafa0c78a7563

  • SHA1

    5fe94084f917195d747ad8bf058613bb50b1039e

  • SHA256

    21705344fed8a60c329fa0daae82f133cd7af70d563df1bc6ce5d79d66f4e1df

  • SHA512

    da39b3621ec349196d2e65828dbd4b5d57bc3eb407cdcdfbeab4b4eee6947cbe1f9a4e4bdbc01bb65299a11f5eb6c12edce810b1b30bd84525a842fbda0741e0

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      b2ce33a1fbc3e1eb535eafa0c78a7563

    • Size

      9.0MB

    • MD5

      b2ce33a1fbc3e1eb535eafa0c78a7563

    • SHA1

      5fe94084f917195d747ad8bf058613bb50b1039e

    • SHA256

      21705344fed8a60c329fa0daae82f133cd7af70d563df1bc6ce5d79d66f4e1df

    • SHA512

      da39b3621ec349196d2e65828dbd4b5d57bc3eb407cdcdfbeab4b4eee6947cbe1f9a4e4bdbc01bb65299a11f5eb6c12edce810b1b30bd84525a842fbda0741e0

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks