fakeav | 192a70a765957bf9e5ded98fe147e6e0e437d30080b572216174a4e94a0a1440

Resubmissions

25/06/2021, 19:04

210625-3q4myth2ca10

19/01/2021, 19:22

210119-74yjheq4bx10

17/01/2021, 19:15

210117-72yv52cjkn10

08/11/2020, 18:23

201108-mnckpgycdx6

Sharing

Copy URL Twitter E-mail

General

Target
192a70a765957bf9e5ded98fe147e6e0e437d30080b572216174a4e94a0a1440
Size 711KB
Sample210117-72yv52cjkn
SHA256 192a70a765957bf9e5ded98fe147e6e0e437d30080b572216174a4e94a0a1440
MD5 c11c38a2dc17558e70902eeb958ffdca
SHA1 dd16882a61da57e21389e0f856740e6d3c8e2b49
SHA512 5483a32cc11c9d1de4859ab859c41e163480e8b98390afe106fab76734a85a983630f20d6572e088d7845cd2cc6944e685344725fe9798c20cc579ed237fef9f
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Targets

- Target
  192a70a765957bf9e5ded98fe147e6e0e437d30080b572216174a4e94a0a1440
- Size 711KB
- SHA256 192a70a765957bf9e5ded98fe147e6e0e437d30080b572216174a4e94a0a1440
- MD5 c11c38a2dc17558e70902eeb958ffdca
- SHA1 dd16882a61da57e21389e0f856740e6d3c8e2b49
- SHA512 5483a32cc11c9d1de4859ab859c41e163480e8b98390afe106fab76734a85a983630f20d6572e088d7845cd2cc6944e685344725fe9798c20cc579ed237fef9f
- MD5 SHA1 SHA512
Score

10^/10

fakeav fakeav persistence spyware
- FakeAV, RogueAntivirus
  FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.
  fakeav spyware fakeav
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

FakeAV, RogueAntivirus

Adds Run key to start application

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2