Overview

overview

10

Static

static

10

8a2c45a685...0f.exe

windows7_x64

10

8a2c45a685...0f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a2c45a685c2d77179698f3de8d6959923f6fbcb8e76953569c21d5246571a0f

  • Size

    711KB

  • Sample

    210510-yaql8wjy8a

  • MD5

    d17c71d9dae4448db2c6053a3c50dd4a

  • SHA1

    d8275a13557859ba9a7e92dc6f7a72ff0ae6c5d2

  • SHA256

    8a2c45a685c2d77179698f3de8d6959923f6fbcb8e76953569c21d5246571a0f

  • SHA512

    969e51566fa5fe09670bf6d3731153cd4d6b87edd587a766c0369cded2d98972fd58e8113bb422524662835b9a6df7c25073493bb40d91ffcacbc0fb306831ae

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      8a2c45a685c2d77179698f3de8d6959923f6fbcb8e76953569c21d5246571a0f

    • Size

      711KB

    • MD5

      d17c71d9dae4448db2c6053a3c50dd4a

    • SHA1

      d8275a13557859ba9a7e92dc6f7a72ff0ae6c5d2

    • SHA256

      8a2c45a685c2d77179698f3de8d6959923f6fbcb8e76953569c21d5246571a0f

    • SHA512

      969e51566fa5fe09670bf6d3731153cd4d6b87edd587a766c0369cded2d98972fd58e8113bb422524662835b9a6df7c25073493bb40d91ffcacbc0fb306831ae

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks