Overview

overview

10

Static

static

10

c55e2716_b...is.exe

windows7_x64

10

c55e2716_b...is.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c55e2716_by_Libranalysis

  • Size

    1.6MB

  • Sample

    210505-t14ct8avcx

  • MD5

    c55e27166c79873913bd5d4b5f3787c4

  • SHA1

    ae649c013079403c497f64119fe3aa127c56ef0a

  • SHA256

    3d06f0bae062ee37b60b0a4ca25fe2a27f817c8d375f2a2721bd4b7951e23d31

  • SHA512

    ddf4c688256596f86fdfbde59558819fb2a99a13040124ac402a4c85cff05d9358e3b793bbb7abf0d268bd53f0ec62cd80a48c1baae3a2fd5dd0b07f4a3d9f8a

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      c55e2716_by_Libranalysis

    • Size

      1.6MB

    • MD5

      c55e27166c79873913bd5d4b5f3787c4

    • SHA1

      ae649c013079403c497f64119fe3aa127c56ef0a

    • SHA256

      3d06f0bae062ee37b60b0a4ca25fe2a27f817c8d375f2a2721bd4b7951e23d31

    • SHA512

      ddf4c688256596f86fdfbde59558819fb2a99a13040124ac402a4c85cff05d9358e3b793bbb7abf0d268bd53f0ec62cd80a48c1baae3a2fd5dd0b07f4a3d9f8a

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks