Overview

overview

10

Static

static

10

4ded6083e6...c9.exe

windows7_x64

10

4ded6083e6...c9.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ded6083e62fa831e74f810f32dffacca55e8219c5441db52d82bda8eba375c9

  • Size

    812KB

  • Sample

    210504-pm7sbync66

  • MD5

    1ae3347e3618f706a1037ef133530c79

  • SHA1

    30122bd2549b74dc0c56c4fbb6c3763ff7dc78f2

  • SHA256

    4ded6083e62fa831e74f810f32dffacca55e8219c5441db52d82bda8eba375c9

  • SHA512

    b988a7884867cdca268c697b04e4c00495add6178e83fa52072ccaf74b90aeed35cbb61828c80de9a861bfe741ff830378f28efb7cdd6604716aa2332961c06b

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      4ded6083e62fa831e74f810f32dffacca55e8219c5441db52d82bda8eba375c9

    • Size

      812KB

    • MD5

      1ae3347e3618f706a1037ef133530c79

    • SHA1

      30122bd2549b74dc0c56c4fbb6c3763ff7dc78f2

    • SHA256

      4ded6083e62fa831e74f810f32dffacca55e8219c5441db52d82bda8eba375c9

    • SHA512

      b988a7884867cdca268c697b04e4c00495add6178e83fa52072ccaf74b90aeed35cbb61828c80de9a861bfe741ff830378f28efb7cdd6604716aa2332961c06b

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks