Overview

overview

10

Static

static

10

cc97b15442...ff.exe

windows7_x64

10

cc97b15442...ff.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc97b154425c377f0c1d16281b6763f4363e8f027ab5d40f0f78e9ac892364ff

  • Size

    711KB

  • Sample

    210511-1zaksqp2kj

  • MD5

    9e8e6e3c122b478418d53f3da1da40b9

  • SHA1

    29ca96dfa315703b6cac609a098e55e9598dde23

  • SHA256

    cc97b154425c377f0c1d16281b6763f4363e8f027ab5d40f0f78e9ac892364ff

  • SHA512

    dee6083737f5394946b4ca133d2900c38a79faa4db7d0e64d5eed0692fd278e3bed89650d32eda670a84e095cb8e51502ab5a3bb97847713901f05554cf69e59

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      cc97b154425c377f0c1d16281b6763f4363e8f027ab5d40f0f78e9ac892364ff

    • Size

      711KB

    • MD5

      9e8e6e3c122b478418d53f3da1da40b9

    • SHA1

      29ca96dfa315703b6cac609a098e55e9598dde23

    • SHA256

      cc97b154425c377f0c1d16281b6763f4363e8f027ab5d40f0f78e9ac892364ff

    • SHA512

      dee6083737f5394946b4ca133d2900c38a79faa4db7d0e64d5eed0692fd278e3bed89650d32eda670a84e095cb8e51502ab5a3bb97847713901f05554cf69e59

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks