Overview

overview

10

Static

static

10

54d2468554...c5.exe

windows7_x64

10

54d2468554...c5.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54d24685543869ba5904416d51ead9cb3a60727c71826b093536d79da033c2c5

  • Size

    812KB

  • Sample

    210505-h3m1cnkcma

  • MD5

    2195638dd1a41dc93aa960117d79faeb

  • SHA1

    861a177dabf8fc7269c9e8b4a37aaa305d9422b4

  • SHA256

    54d24685543869ba5904416d51ead9cb3a60727c71826b093536d79da033c2c5

  • SHA512

    02081e3d871e7be27754c11e71a6bb5a04888b448b25f350cef4dde723af803931683ea9fed29805e2c9db10da226f95c0950ffa7f49ad79b0ab37e650cb7188

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      54d24685543869ba5904416d51ead9cb3a60727c71826b093536d79da033c2c5

    • Size

      812KB

    • MD5

      2195638dd1a41dc93aa960117d79faeb

    • SHA1

      861a177dabf8fc7269c9e8b4a37aaa305d9422b4

    • SHA256

      54d24685543869ba5904416d51ead9cb3a60727c71826b093536d79da033c2c5

    • SHA512

      02081e3d871e7be27754c11e71a6bb5a04888b448b25f350cef4dde723af803931683ea9fed29805e2c9db10da226f95c0950ffa7f49ad79b0ab37e650cb7188

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks