Overview

overview

10

Static

static

10

479f0469b7...83.exe

windows7_x64

10

479f0469b7...83.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    479f0469b70ea5056a3115fa776632c6d300af11009d5aa44be4e6557903d783

  • Size

    812KB

  • Sample

    210508-jrgy835wgx

  • MD5

    fb92373c3c9ade1807641e14081370ef

  • SHA1

    e64ee01e6d4a5cd0d0fbf2694eff4b0d6a5d1d99

  • SHA256

    479f0469b70ea5056a3115fa776632c6d300af11009d5aa44be4e6557903d783

  • SHA512

    681aa30964a641e89b8b99f2b6aad908861215ec25e085291370bfb70d8f95cd68413c5e008ec647065583c9d0e4ec560183e16d78f35e057aec37090afacb9e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      479f0469b70ea5056a3115fa776632c6d300af11009d5aa44be4e6557903d783

    • Size

      812KB

    • MD5

      fb92373c3c9ade1807641e14081370ef

    • SHA1

      e64ee01e6d4a5cd0d0fbf2694eff4b0d6a5d1d99

    • SHA256

      479f0469b70ea5056a3115fa776632c6d300af11009d5aa44be4e6557903d783

    • SHA512

      681aa30964a641e89b8b99f2b6aad908861215ec25e085291370bfb70d8f95cd68413c5e008ec647065583c9d0e4ec560183e16d78f35e057aec37090afacb9e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks