Overview

overview

10

Static

static

10

ae6a38e36f...2a.exe

windows7_x64

10

ae6a38e36f...2a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae6a38e36f0f7100977cf876be9639abde72aeee75aabc9c77ea15404746b82a

  • Size

    711KB

  • Sample

    210505-4avqv77bfa

  • MD5

    f9ac74d771169cf63aa3718f0861aeb3

  • SHA1

    e078cb36c13c2fac1c98f0e2d0544916ca791685

  • SHA256

    ae6a38e36f0f7100977cf876be9639abde72aeee75aabc9c77ea15404746b82a

  • SHA512

    64d19f2eb802069a52d397c4cb65c5d73c761e81b1633f8769fb14962b21d99f4c9604d2eedf8f95e021e51c6d995a8a4adc3b731c05b4598448a58387442b6d

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ae6a38e36f0f7100977cf876be9639abde72aeee75aabc9c77ea15404746b82a

    • Size

      711KB

    • MD5

      f9ac74d771169cf63aa3718f0861aeb3

    • SHA1

      e078cb36c13c2fac1c98f0e2d0544916ca791685

    • SHA256

      ae6a38e36f0f7100977cf876be9639abde72aeee75aabc9c77ea15404746b82a

    • SHA512

      64d19f2eb802069a52d397c4cb65c5d73c761e81b1633f8769fb14962b21d99f4c9604d2eedf8f95e021e51c6d995a8a4adc3b731c05b4598448a58387442b6d

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks