Overview

overview

10

Static

static

10

31ec125598...d6.exe

windows7_x64

10

31ec125598...d6.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31ec1255985aa04711ca49f867f50fec6f0cb0def2b229e50558238b77db4ad6

  • Size

    812KB

  • Sample

    210508-jkwpv6cyej

  • MD5

    1b2bf217ac8f4e9f48d28f1a1af994c3

  • SHA1

    37a60a6f28d18cf66b9d615d0d14a8d2004558ab

  • SHA256

    31ec1255985aa04711ca49f867f50fec6f0cb0def2b229e50558238b77db4ad6

  • SHA512

    99ab9dd7e8dd04f5baf5e12dd4cca1480d146f153fd73164d6e153a05aa242b13d2ee5617465a615de3af9591a8c827c1b4c591e9d6851ab6841301d1549f11b

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      31ec1255985aa04711ca49f867f50fec6f0cb0def2b229e50558238b77db4ad6

    • Size

      812KB

    • MD5

      1b2bf217ac8f4e9f48d28f1a1af994c3

    • SHA1

      37a60a6f28d18cf66b9d615d0d14a8d2004558ab

    • SHA256

      31ec1255985aa04711ca49f867f50fec6f0cb0def2b229e50558238b77db4ad6

    • SHA512

      99ab9dd7e8dd04f5baf5e12dd4cca1480d146f153fd73164d6e153a05aa242b13d2ee5617465a615de3af9591a8c827c1b4c591e9d6851ab6841301d1549f11b

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks