Overview

overview

10

Static

static

10

bdcb9946_b...is.exe

windows7_x64

10

bdcb9946_b...is.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdcb9946_by_Libranalysis

  • Size

    1.6MB

  • Sample

    210505-jjkmnx9kfe

  • MD5

    bdcb9946c685f08561ea45b37068e0b5

  • SHA1

    890b777154849e26a527b2eb502b6f3ccb4129bb

  • SHA256

    10648e7ab3e5623de3a63300fad53d594430e7ce37e51f626ef4edcec8de89ba

  • SHA512

    6ce017d0a768287cf58195e83057f78091deb424e10f5c20a416470db5a88336079e4ad7499cca7cd4b8de64e6357992ff2dcbeb37aee87e0b004795d0dc2004

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      bdcb9946_by_Libranalysis

    • Size

      1.6MB

    • MD5

      bdcb9946c685f08561ea45b37068e0b5

    • SHA1

      890b777154849e26a527b2eb502b6f3ccb4129bb

    • SHA256

      10648e7ab3e5623de3a63300fad53d594430e7ce37e51f626ef4edcec8de89ba

    • SHA512

      6ce017d0a768287cf58195e83057f78091deb424e10f5c20a416470db5a88336079e4ad7499cca7cd4b8de64e6357992ff2dcbeb37aee87e0b004795d0dc2004

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks