Overview

overview

10

Static

static

10

a91870a6c5...a6.exe

windows7_x64

1

a91870a6c5...a6.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a91870a6c5aaeefc35b346eff8f89db54564a2a7ea7b1a21d6de3292e6c86aa6

  • Size

    711KB

  • Sample

    210508-4x6ad25r4s

  • MD5

    f0dcfb9c79bba7f39b9456d9308617c3

  • SHA1

    0bdfffc9dc0b36796d1a2d5b0201abaabe6e7b7d

  • SHA256

    a91870a6c5aaeefc35b346eff8f89db54564a2a7ea7b1a21d6de3292e6c86aa6

  • SHA512

    f4d3e72dc85d2126c0c908bd70e41b203175d83c20dfef47067808d468b745abcf23e8a3e705983b38b1972782b6b637f62b1e14b5f5b5045dfd99ba0e53a1de

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      a91870a6c5aaeefc35b346eff8f89db54564a2a7ea7b1a21d6de3292e6c86aa6

    • Size

      711KB

    • MD5

      f0dcfb9c79bba7f39b9456d9308617c3

    • SHA1

      0bdfffc9dc0b36796d1a2d5b0201abaabe6e7b7d

    • SHA256

      a91870a6c5aaeefc35b346eff8f89db54564a2a7ea7b1a21d6de3292e6c86aa6

    • SHA512

      f4d3e72dc85d2126c0c908bd70e41b203175d83c20dfef47067808d468b745abcf23e8a3e705983b38b1972782b6b637f62b1e14b5f5b5045dfd99ba0e53a1de

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks