Overview

overview

10

Static

static

10

f5e33911_b...is.exe

windows7_x64

10

f5e33911_b...is.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5e33911_by_Libranalysis

  • Size

    812KB

  • Sample

    210505-b5ec2ry8zn

  • MD5

    f5e33911a79b26572fa8093144750600

  • SHA1

    7e490f7e59b69cf584f8812cbc010e9c57810d53

  • SHA256

    be4a0ff1203c11a2a0c299d86689cf164446195b0976f461449fd0a3cfb09c53

  • SHA512

    8e69acf61a3418fdaa0ae5f8541456bce9edd62b653772c4df02f95bbdc8c988bc6f0571b3ff9e8fa4065f1698bdf85988b4cc66e2f1dd8ced84e461027241e7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      f5e33911_by_Libranalysis

    • Size

      812KB

    • MD5

      f5e33911a79b26572fa8093144750600

    • SHA1

      7e490f7e59b69cf584f8812cbc010e9c57810d53

    • SHA256

      be4a0ff1203c11a2a0c299d86689cf164446195b0976f461449fd0a3cfb09c53

    • SHA512

      8e69acf61a3418fdaa0ae5f8541456bce9edd62b653772c4df02f95bbdc8c988bc6f0571b3ff9e8fa4065f1698bdf85988b4cc66e2f1dd8ced84e461027241e7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks