Overview

overview

10

Static

static

10

9a9d67a22b...67.exe

windows7_x64

10

9a9d67a22b...67.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a9d67a22bd37448361306bc084a9c9cdc88d7b1ebd4188fdd45f52c66199567

  • Size

    812KB

  • Sample

    210509-2pqsk38f2n

  • MD5

    1befbcb66cb36cc1dee231f6c3ea4e14

  • SHA1

    6294fb2552ac46e848be58fd74d96d524f492571

  • SHA256

    9a9d67a22bd37448361306bc084a9c9cdc88d7b1ebd4188fdd45f52c66199567

  • SHA512

    0c5ff0e9cbd04c7e0c373e00c0fa9de8540b165dc490589b72cad921002cd682b5db733e4151cf481a317d7c12268f2f5effbca39d8a6232dde5a26e1b6647d4

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      9a9d67a22bd37448361306bc084a9c9cdc88d7b1ebd4188fdd45f52c66199567

    • Size

      812KB

    • MD5

      1befbcb66cb36cc1dee231f6c3ea4e14

    • SHA1

      6294fb2552ac46e848be58fd74d96d524f492571

    • SHA256

      9a9d67a22bd37448361306bc084a9c9cdc88d7b1ebd4188fdd45f52c66199567

    • SHA512

      0c5ff0e9cbd04c7e0c373e00c0fa9de8540b165dc490589b72cad921002cd682b5db733e4151cf481a317d7c12268f2f5effbca39d8a6232dde5a26e1b6647d4

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks