Overview

overview

10

Static

static

10

5ad134450d...cc.exe

windows7_x64

10

5ad134450d...cc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ad134450d430d2ed2e7f847bc15fbab797e799f9215b112c33ad9b936d781cc

  • Size

    812KB

  • Sample

    210505-mcq5frwwga

  • MD5

    9f86f6990b087efde94e452b1f47287f

  • SHA1

    8307e39907380e72ca006fa743c8448f2cddc1ac

  • SHA256

    5ad134450d430d2ed2e7f847bc15fbab797e799f9215b112c33ad9b936d781cc

  • SHA512

    a9c6d9e84efdd37ae98ccf816c60906aab0eb6fe9e45ed3ec3a75a72f7bcffa93a5f4df1c42d47d85eec5cc16dec0fb11d61f61980e2eca522ad9b10a59088f9

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      5ad134450d430d2ed2e7f847bc15fbab797e799f9215b112c33ad9b936d781cc

    • Size

      812KB

    • MD5

      9f86f6990b087efde94e452b1f47287f

    • SHA1

      8307e39907380e72ca006fa743c8448f2cddc1ac

    • SHA256

      5ad134450d430d2ed2e7f847bc15fbab797e799f9215b112c33ad9b936d781cc

    • SHA512

      a9c6d9e84efdd37ae98ccf816c60906aab0eb6fe9e45ed3ec3a75a72f7bcffa93a5f4df1c42d47d85eec5cc16dec0fb11d61f61980e2eca522ad9b10a59088f9

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks