Overview

overview

10

Static

static

10

cbdbcbfe74...da.exe

windows7_x64

10

cbdbcbfe74...da.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbdbcbfe74a3eb8e6571dd2e7fe4df62acbd6ab90f13897f4dc26c417ce0a1da

  • Size

    1.6MB

  • Sample

    210508-m3fz2rjra6

  • MD5

    1dce56252c1cab85dbefc27010cb2bdf

  • SHA1

    0d43c855329ff497d78db1727ef383b050ce3009

  • SHA256

    cbdbcbfe74a3eb8e6571dd2e7fe4df62acbd6ab90f13897f4dc26c417ce0a1da

  • SHA512

    eec1b2a61fe369e32f8881f76f34839df815e849637c3a44b8902976684531dcda3395c189892c82b557727588e1fb068eed9309bb5b40c1cb7c0ab18866289f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      cbdbcbfe74a3eb8e6571dd2e7fe4df62acbd6ab90f13897f4dc26c417ce0a1da

    • Size

      1.6MB

    • MD5

      1dce56252c1cab85dbefc27010cb2bdf

    • SHA1

      0d43c855329ff497d78db1727ef383b050ce3009

    • SHA256

      cbdbcbfe74a3eb8e6571dd2e7fe4df62acbd6ab90f13897f4dc26c417ce0a1da

    • SHA512

      eec1b2a61fe369e32f8881f76f34839df815e849637c3a44b8902976684531dcda3395c189892c82b557727588e1fb068eed9309bb5b40c1cb7c0ab18866289f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks