Overview

overview

10

Static

static

10

8d15056c0e...92.exe

windows7_x64

10

8d15056c0e...92.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d15056c0e17eae06ad77ea988154292

  • Size

    1.6MB

  • Sample

    201214-gyjkrcw6m6

  • MD5

    8d15056c0e17eae06ad77ea988154292

  • SHA1

    d78d31043d7de19dc7577d63da738f043867b0bf

  • SHA256

    a72974025b27504ac3c64cffa56959495162479db172b02358486ef4e915ea09

  • SHA512

    28d7abd051a4c1db8cae996d015d8148dbfdc747953a3707775cb236505e099cd23d9ba62e5d0018cd12a0dac37f2e657c33355654ceac9f9338ee1edb7f5c95

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      8d15056c0e17eae06ad77ea988154292

    • Size

      1.6MB

    • MD5

      8d15056c0e17eae06ad77ea988154292

    • SHA1

      d78d31043d7de19dc7577d63da738f043867b0bf

    • SHA256

      a72974025b27504ac3c64cffa56959495162479db172b02358486ef4e915ea09

    • SHA512

      28d7abd051a4c1db8cae996d015d8148dbfdc747953a3707775cb236505e099cd23d9ba62e5d0018cd12a0dac37f2e657c33355654ceac9f9338ee1edb7f5c95

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks