Overview

overview

10

Static

static

10

90ff73b63f...99.exe

windows7_x64

10

90ff73b63f...99.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90ff73b63ff68a22884094d309b1f80b7b28e49b824d4d8884b9cda24ad6a699

  • Size

    812KB

  • Sample

    210509-28kkpvh2ca

  • MD5

    9de33bef532ab1f27797bbb4463f7eef

  • SHA1

    98dd4c1ddbfb596fbfa49a65686eaed6387453ea

  • SHA256

    90ff73b63ff68a22884094d309b1f80b7b28e49b824d4d8884b9cda24ad6a699

  • SHA512

    c912d1209cdd44dc700838a3abd85ba437425e023b90d0987e289cb062f5b54b615630c2426a22d08a10d8ba782fca505a9de8baca7bef40938896274ea70692

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      90ff73b63ff68a22884094d309b1f80b7b28e49b824d4d8884b9cda24ad6a699

    • Size

      812KB

    • MD5

      9de33bef532ab1f27797bbb4463f7eef

    • SHA1

      98dd4c1ddbfb596fbfa49a65686eaed6387453ea

    • SHA256

      90ff73b63ff68a22884094d309b1f80b7b28e49b824d4d8884b9cda24ad6a699

    • SHA512

      c912d1209cdd44dc700838a3abd85ba437425e023b90d0987e289cb062f5b54b615630c2426a22d08a10d8ba782fca505a9de8baca7bef40938896274ea70692

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks