Overview

overview

10

Static

static

10

ba4d69bf18...75.exe

windows7_x64

10

ba4d69bf18...75.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba4d69bf189f3b503a041e5f9d74be6512ead7d7e681f0637a67ece28e9bc475

  • Size

    1.6MB

  • Sample

    210509-y1fwwkngle

  • MD5

    9fbec565d87c9591cbec99dced2105c2

  • SHA1

    d5d9d74fc875298d90108862732f4c165fa33a52

  • SHA256

    ba4d69bf189f3b503a041e5f9d74be6512ead7d7e681f0637a67ece28e9bc475

  • SHA512

    253792d780006f6bf0128e4898f8c476a66e10494a0465e0ea8978ac61a5cefa99b9acabc17e9e1a99ac156972da05b04171df34ce1c46a75b1c7f54d7b3cd1e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ba4d69bf189f3b503a041e5f9d74be6512ead7d7e681f0637a67ece28e9bc475

    • Size

      1.6MB

    • MD5

      9fbec565d87c9591cbec99dced2105c2

    • SHA1

      d5d9d74fc875298d90108862732f4c165fa33a52

    • SHA256

      ba4d69bf189f3b503a041e5f9d74be6512ead7d7e681f0637a67ece28e9bc475

    • SHA512

      253792d780006f6bf0128e4898f8c476a66e10494a0465e0ea8978ac61a5cefa99b9acabc17e9e1a99ac156972da05b04171df34ce1c46a75b1c7f54d7b3cd1e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks