Overview

overview

10

Static

static

10

bb0a70a9e9...c6.exe

windows7_x64

10

bb0a70a9e9...c6.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb0a70a9e946492696ce562efe1704d99a27658686c932d43d2b2806473abec6

  • Size

    1.6MB

  • Sample

    210509-e65lx39tvj

  • MD5

    ef631fb89346bd91a4f5d01a21ccfdf8

  • SHA1

    e580ebc8e4d6b5531748d4d3858072ca1a2d2a08

  • SHA256

    bb0a70a9e946492696ce562efe1704d99a27658686c932d43d2b2806473abec6

  • SHA512

    ad8d1c28a745898402dc7149deb548607f320a97b9f0a1239483d5e15efdfe055e9b7b38bfa133609fde831522f10ace5b61217562a3fdff9a7631377693a620

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      bb0a70a9e946492696ce562efe1704d99a27658686c932d43d2b2806473abec6

    • Size

      1.6MB

    • MD5

      ef631fb89346bd91a4f5d01a21ccfdf8

    • SHA1

      e580ebc8e4d6b5531748d4d3858072ca1a2d2a08

    • SHA256

      bb0a70a9e946492696ce562efe1704d99a27658686c932d43d2b2806473abec6

    • SHA512

      ad8d1c28a745898402dc7149deb548607f320a97b9f0a1239483d5e15efdfe055e9b7b38bfa133609fde831522f10ace5b61217562a3fdff9a7631377693a620

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks