Overview

overview

10

Static

static

10

42af9f105b...43.exe

windows7_x64

10

42af9f105b...43.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42af9f105b1be230086ebb65d7de0ad9aacb10271c59a5fcdb4d7b85dacc7843

  • Size

    1.6MB

  • Sample

    210505-h2tzqbhxee

  • MD5

    cb9875fea93fb27aec9fc3ecc2d05953

  • SHA1

    cb100c730e1248906d5491171c1abb9dd746d0c6

  • SHA256

    42af9f105b1be230086ebb65d7de0ad9aacb10271c59a5fcdb4d7b85dacc7843

  • SHA512

    bc4a3ac8473f80f7ae0edf7e52b19b0e8ba04657c38ed3f251f814d1b2388c305e4b300ff773f616dedd903f6979f72e9aedf115a0beb86b3afdd6c5e3200a4e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      42af9f105b1be230086ebb65d7de0ad9aacb10271c59a5fcdb4d7b85dacc7843

    • Size

      1.6MB

    • MD5

      cb9875fea93fb27aec9fc3ecc2d05953

    • SHA1

      cb100c730e1248906d5491171c1abb9dd746d0c6

    • SHA256

      42af9f105b1be230086ebb65d7de0ad9aacb10271c59a5fcdb4d7b85dacc7843

    • SHA512

      bc4a3ac8473f80f7ae0edf7e52b19b0e8ba04657c38ed3f251f814d1b2388c305e4b300ff773f616dedd903f6979f72e9aedf115a0beb86b3afdd6c5e3200a4e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks