Overview

overview

10

Static

static

10

f9f654ca78...cc.exe

windows7_x64

10

f9f654ca78...cc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9f654ca78997157f77b18519aa64f9522f1ab8bbb2cc7b17a7603648dd5e8cc

  • Size

    1.6MB

  • Sample

    210508-ajy816nl1x

  • MD5

    fd2c3e6594caf9101f3855040328c8fa

  • SHA1

    6f9f9e9a9eba7af2bc3ebd90f444a29f0be86c80

  • SHA256

    f9f654ca78997157f77b18519aa64f9522f1ab8bbb2cc7b17a7603648dd5e8cc

  • SHA512

    81a01b11ae3f17bd3b651fdda4ff8603f6a10adc9827c5b101107f9908029521e96df1e538e206f4aa5b49fb640d5cf8f86c5ed3736d4d25f40ee89efcd9e361

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      f9f654ca78997157f77b18519aa64f9522f1ab8bbb2cc7b17a7603648dd5e8cc

    • Size

      1.6MB

    • MD5

      fd2c3e6594caf9101f3855040328c8fa

    • SHA1

      6f9f9e9a9eba7af2bc3ebd90f444a29f0be86c80

    • SHA256

      f9f654ca78997157f77b18519aa64f9522f1ab8bbb2cc7b17a7603648dd5e8cc

    • SHA512

      81a01b11ae3f17bd3b651fdda4ff8603f6a10adc9827c5b101107f9908029521e96df1e538e206f4aa5b49fb640d5cf8f86c5ed3736d4d25f40ee89efcd9e361

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks