Overview

overview

10

Static

static

10

05774e01c7...bc.exe

windows7_x64

10

05774e01c7...bc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05774e01c7792fa2917b2dbb037fef44245c12c5af61d576e85b1cf267880ebc

  • Size

    1.6MB

  • Sample

    210508-tlz698fbpn

  • MD5

    eda5b645b281a69ac23f9ebecf2233eb

  • SHA1

    8d084bd0973195020b67961c082998deec48ac8e

  • SHA256

    05774e01c7792fa2917b2dbb037fef44245c12c5af61d576e85b1cf267880ebc

  • SHA512

    f82ae395748991874eea985b1a5701427fff64c7cc0205c3bcc9885dcf270d60cb71c3682891e64fea806678784594d4995ce8b537db158bf66f5421975a43a1

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      05774e01c7792fa2917b2dbb037fef44245c12c5af61d576e85b1cf267880ebc

    • Size

      1.6MB

    • MD5

      eda5b645b281a69ac23f9ebecf2233eb

    • SHA1

      8d084bd0973195020b67961c082998deec48ac8e

    • SHA256

      05774e01c7792fa2917b2dbb037fef44245c12c5af61d576e85b1cf267880ebc

    • SHA512

      f82ae395748991874eea985b1a5701427fff64c7cc0205c3bcc9885dcf270d60cb71c3682891e64fea806678784594d4995ce8b537db158bf66f5421975a43a1

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks