Overview

overview

10

Static

static

10

3b4c031709...ce.exe

windows7_x64

10

3b4c031709...ce.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b4c03170952dc9461f79b70dcb64635ce319732c841d6ab4248ecc710ae15ce

  • Size

    1.6MB

  • Sample

    210504-5veeclhvhj

  • MD5

    eb7cfa36d5fda7746f3aa4a16299a116

  • SHA1

    806f4d5bd3798561fa67db11a1f2a9255400aa5e

  • SHA256

    3b4c03170952dc9461f79b70dcb64635ce319732c841d6ab4248ecc710ae15ce

  • SHA512

    61751c44dbfe0ea6a477b056a9882b82ea574e4c06ac676bbb7f05ea8634dd4ff420fcf51b2c6824e785124e7885aef2a28e594ec49347d2e6689c68c0b59bcd

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3b4c03170952dc9461f79b70dcb64635ce319732c841d6ab4248ecc710ae15ce

    • Size

      1.6MB

    • MD5

      eb7cfa36d5fda7746f3aa4a16299a116

    • SHA1

      806f4d5bd3798561fa67db11a1f2a9255400aa5e

    • SHA256

      3b4c03170952dc9461f79b70dcb64635ce319732c841d6ab4248ecc710ae15ce

    • SHA512

      61751c44dbfe0ea6a477b056a9882b82ea574e4c06ac676bbb7f05ea8634dd4ff420fcf51b2c6824e785124e7885aef2a28e594ec49347d2e6689c68c0b59bcd

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks