Overview

overview

10

Static

static

10

94c67758a1...9d.exe

windows7_x64

10

94c67758a1...9d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94c67758a1fe82576cac9a635b1b095a77dd47e7ea183797c3f67943e4cda09d

  • Size

    1.6MB

  • Sample

    210509-e35qhytgje

  • MD5

    d19210d5974cafa597bb56a341ef953f

  • SHA1

    12085edefd306d5128d8f7cbf05d8b88672a4fdb

  • SHA256

    94c67758a1fe82576cac9a635b1b095a77dd47e7ea183797c3f67943e4cda09d

  • SHA512

    d8334ddb095a41255ce7051b71115be17b0b6e69b2d64c836689d5789934572b1087f9a0df5bfac3064f0ef2ae24dd3fccd784eb680ea911640c75ff7d39610f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      94c67758a1fe82576cac9a635b1b095a77dd47e7ea183797c3f67943e4cda09d

    • Size

      1.6MB

    • MD5

      d19210d5974cafa597bb56a341ef953f

    • SHA1

      12085edefd306d5128d8f7cbf05d8b88672a4fdb

    • SHA256

      94c67758a1fe82576cac9a635b1b095a77dd47e7ea183797c3f67943e4cda09d

    • SHA512

      d8334ddb095a41255ce7051b71115be17b0b6e69b2d64c836689d5789934572b1087f9a0df5bfac3064f0ef2ae24dd3fccd784eb680ea911640c75ff7d39610f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks