Overview

overview

10

Static

static

10

314b58c116...18.exe

windows7_x64

10

314b58c116...18.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    314b58c116adc6946845cb60eb0354cc23a33fcfe72fa9fedde6a42a8b72c318

  • Size

    812KB

  • Sample

    210509-w365zynjjx

  • MD5

    61a615e91a988dcb9066f92491f4082e

  • SHA1

    e5535e4a6fef2543430eddeb7cb3156f679d0493

  • SHA256

    314b58c116adc6946845cb60eb0354cc23a33fcfe72fa9fedde6a42a8b72c318

  • SHA512

    2a840d40ed12c292a04edcf10bf3ff826d3062171b5ed1abe5631da98eeb4808efb6ea63c8a5b1e61b9f4d6782236af2cd90624763e4ffea549b1f1ba56f0a05

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      314b58c116adc6946845cb60eb0354cc23a33fcfe72fa9fedde6a42a8b72c318

    • Size

      812KB

    • MD5

      61a615e91a988dcb9066f92491f4082e

    • SHA1

      e5535e4a6fef2543430eddeb7cb3156f679d0493

    • SHA256

      314b58c116adc6946845cb60eb0354cc23a33fcfe72fa9fedde6a42a8b72c318

    • SHA512

      2a840d40ed12c292a04edcf10bf3ff826d3062171b5ed1abe5631da98eeb4808efb6ea63c8a5b1e61b9f4d6782236af2cd90624763e4ffea549b1f1ba56f0a05

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks