Overview

overview

10

Static

static

10

c187b2ae35...39.exe

windows7_x64

10

c187b2ae35...39.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c187b2ae3566973a18a0725d38d53f6dd5ac59ac1abcf0e11d8054fa348e9739

  • Size

    812KB

  • Sample

    210508-b7hkc8e9tj

  • MD5

    a21a90eb43feff51c742372cebe72f3c

  • SHA1

    af9b58a4296c720422fe02da5755d1de04dcde28

  • SHA256

    c187b2ae3566973a18a0725d38d53f6dd5ac59ac1abcf0e11d8054fa348e9739

  • SHA512

    65b4eb058dbeb72c482aed952212465121d945a8b9fb64a544d2c309c008fd57266c026b3deaf23c6ba3ae8093bdf4a7ea0eb583210bebbdd72165c1c5792a11

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      c187b2ae3566973a18a0725d38d53f6dd5ac59ac1abcf0e11d8054fa348e9739

    • Size

      812KB

    • MD5

      a21a90eb43feff51c742372cebe72f3c

    • SHA1

      af9b58a4296c720422fe02da5755d1de04dcde28

    • SHA256

      c187b2ae3566973a18a0725d38d53f6dd5ac59ac1abcf0e11d8054fa348e9739

    • SHA512

      65b4eb058dbeb72c482aed952212465121d945a8b9fb64a544d2c309c008fd57266c026b3deaf23c6ba3ae8093bdf4a7ea0eb583210bebbdd72165c1c5792a11

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks