Overview

overview

10

Static

static

10

e2523ecb8f...9e.exe

windows7_x64

10

e2523ecb8f...9e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2523ecb8f520548382ee74d93dd3fd8d10793a547ec2a4301a5fffe3b67cb9e

  • Size

    711KB

  • Sample

    210504-gztq7ssyss

  • MD5

    f07988ecd388c9349865ea68d7fedb0b

  • SHA1

    aca8d9a75158e636adf4c6c3a7d09b4cb235712b

  • SHA256

    e2523ecb8f520548382ee74d93dd3fd8d10793a547ec2a4301a5fffe3b67cb9e

  • SHA512

    13dc2d26a327e152dc33a73faf1336d9a515a64a012ff79c3a685091f4c09495be0ba7bddb20c8daa42d51ca6f70b70379e55e3773de19072262b0aaaee44e49

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      e2523ecb8f520548382ee74d93dd3fd8d10793a547ec2a4301a5fffe3b67cb9e

    • Size

      711KB

    • MD5

      f07988ecd388c9349865ea68d7fedb0b

    • SHA1

      aca8d9a75158e636adf4c6c3a7d09b4cb235712b

    • SHA256

      e2523ecb8f520548382ee74d93dd3fd8d10793a547ec2a4301a5fffe3b67cb9e

    • SHA512

      13dc2d26a327e152dc33a73faf1336d9a515a64a012ff79c3a685091f4c09495be0ba7bddb20c8daa42d51ca6f70b70379e55e3773de19072262b0aaaee44e49

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks