Overview

overview

10

Static

static

10

9374bea232...9c.exe

windows7_x64

10

9374bea232...9c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9374bea232342589ea4c2e4f4fb26b9c

  • Size

    3.5MB

  • Sample

    201214-x1ma471xma

  • MD5

    9374bea232342589ea4c2e4f4fb26b9c

  • SHA1

    b71f48e5a163ebbad7078c0ad7aa50b2ef6914b2

  • SHA256

    dd0621102daebaecddd4c8d977964b9077589878ba77b65aa038f014c3765738

  • SHA512

    40182722554f5adb2179927797d66edd75ec09e8b0d2e58e2ba5775a95f37ad365690b912995b5c06f9de93b808c191e1f82089181272b77ffc74f4b852a45a1

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      9374bea232342589ea4c2e4f4fb26b9c

    • Size

      3.5MB

    • MD5

      9374bea232342589ea4c2e4f4fb26b9c

    • SHA1

      b71f48e5a163ebbad7078c0ad7aa50b2ef6914b2

    • SHA256

      dd0621102daebaecddd4c8d977964b9077589878ba77b65aa038f014c3765738

    • SHA512

      40182722554f5adb2179927797d66edd75ec09e8b0d2e58e2ba5775a95f37ad365690b912995b5c06f9de93b808c191e1f82089181272b77ffc74f4b852a45a1

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks