Overview

overview

10

Static

static

10

475585c68a...f0.exe

windows7_x64

10

475585c68a...f0.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    475585c68ad5b0bba46c1c0fbb83f9c6c2b0ac790a90c3fdf809ae900158cef0

  • Size

    812KB

  • Sample

    210511-4z6xagtwh2

  • MD5

    c19e378544f3b9a1909f7ef6f4db5052

  • SHA1

    701b02e37c3dd6366851f4f26dc9414da11abb4a

  • SHA256

    475585c68ad5b0bba46c1c0fbb83f9c6c2b0ac790a90c3fdf809ae900158cef0

  • SHA512

    1aba43940a149970d03e65785253b69ffdc71cd78ac1791f2de76dd36659698a91ab177cfcc4bdadb6698d5a30cb26329a9724c45fa6dc21ab620626921f5a3e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      475585c68ad5b0bba46c1c0fbb83f9c6c2b0ac790a90c3fdf809ae900158cef0

    • Size

      812KB

    • MD5

      c19e378544f3b9a1909f7ef6f4db5052

    • SHA1

      701b02e37c3dd6366851f4f26dc9414da11abb4a

    • SHA256

      475585c68ad5b0bba46c1c0fbb83f9c6c2b0ac790a90c3fdf809ae900158cef0

    • SHA512

      1aba43940a149970d03e65785253b69ffdc71cd78ac1791f2de76dd36659698a91ab177cfcc4bdadb6698d5a30cb26329a9724c45fa6dc21ab620626921f5a3e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks