Overview

overview

10

Static

static

10

2eeedc4c52...0f.exe

windows7_x64

10

2eeedc4c52...0f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eeedc4c52b51fa1439b81ee2b87d3281881f25527d5998252840657697a720f

  • Size

    812KB

  • Sample

    210504-c2v7ysedaa

  • MD5

    2010d9186c44b57c6d43ba64999c1b76

  • SHA1

    49afcbcdefd159223eb4d138bb43819e676ae7cc

  • SHA256

    2eeedc4c52b51fa1439b81ee2b87d3281881f25527d5998252840657697a720f

  • SHA512

    19cc713566009b4fb3dd5048a0eec46fe37b48f5501da0bcf1eda6bbc0daf7e1adb757b621354baf524abb984b6a59f5a9293c29ef8594dfc1f095360473672f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      2eeedc4c52b51fa1439b81ee2b87d3281881f25527d5998252840657697a720f

    • Size

      812KB

    • MD5

      2010d9186c44b57c6d43ba64999c1b76

    • SHA1

      49afcbcdefd159223eb4d138bb43819e676ae7cc

    • SHA256

      2eeedc4c52b51fa1439b81ee2b87d3281881f25527d5998252840657697a720f

    • SHA512

      19cc713566009b4fb3dd5048a0eec46fe37b48f5501da0bcf1eda6bbc0daf7e1adb757b621354baf524abb984b6a59f5a9293c29ef8594dfc1f095360473672f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks