Overview

overview

10

Static

static

10

b9626d0662...ef.exe

windows7_x64

10

b9626d0662...ef.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9626d06628e9e4801daa614a35c65d0b46fc3c73011d80cac42c3ec3e3e6fef

  • Size

    1.6MB

  • Sample

    210508-rh37lk8qa6

  • MD5

    1c5211a01e717e9d040a4a1618713a39

  • SHA1

    106891b5d7ee6dd0293581b34631240fb1725996

  • SHA256

    b9626d06628e9e4801daa614a35c65d0b46fc3c73011d80cac42c3ec3e3e6fef

  • SHA512

    f31469b230cce697fce8785dca9d9085eca90cf2f575103b902d1a60c12fcc60393e0f890e2c6cd1d2589d13fe6102781dcebfe1e1fca049329a96ce332690e6

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      b9626d06628e9e4801daa614a35c65d0b46fc3c73011d80cac42c3ec3e3e6fef

    • Size

      1.6MB

    • MD5

      1c5211a01e717e9d040a4a1618713a39

    • SHA1

      106891b5d7ee6dd0293581b34631240fb1725996

    • SHA256

      b9626d06628e9e4801daa614a35c65d0b46fc3c73011d80cac42c3ec3e3e6fef

    • SHA512

      f31469b230cce697fce8785dca9d9085eca90cf2f575103b902d1a60c12fcc60393e0f890e2c6cd1d2589d13fe6102781dcebfe1e1fca049329a96ce332690e6

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks