Overview

overview

10

Static

static

10

365cc6b703...95.exe

windows7_x64

10

365cc6b703...95.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    365cc6b7030b826bc07c79571be76cb1954b3af2e63fb8ef6eddb881853add95

  • Size

    812KB

  • Sample

    210508-5vqbzee5h2

  • MD5

    e91461b70b76d7b8498c9762e82c9250

  • SHA1

    6d8231402d6bc67d279d69e3bf23522662ef62d0

  • SHA256

    365cc6b7030b826bc07c79571be76cb1954b3af2e63fb8ef6eddb881853add95

  • SHA512

    21513b7f7b106204f162e3ade26dd9a4bca47c6cc3d6ab6ac489537a73cbec3887937b27422c93590df0513909e8777a291a65d9ae65ee797a50c10e5b7b1c59

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      365cc6b7030b826bc07c79571be76cb1954b3af2e63fb8ef6eddb881853add95

    • Size

      812KB

    • MD5

      e91461b70b76d7b8498c9762e82c9250

    • SHA1

      6d8231402d6bc67d279d69e3bf23522662ef62d0

    • SHA256

      365cc6b7030b826bc07c79571be76cb1954b3af2e63fb8ef6eddb881853add95

    • SHA512

      21513b7f7b106204f162e3ade26dd9a4bca47c6cc3d6ab6ac489537a73cbec3887937b27422c93590df0513909e8777a291a65d9ae65ee797a50c10e5b7b1c59

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks