Overview

overview

10

Static

static

10

f154f43842...73.exe

windows7_x64

10

f154f43842...73.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f154f438427a1d1f4bd1dfdfec0e651834af262bf0eb97c07298d8f0e6987673

  • Size

    711KB

  • Sample

    210511-563krfvthj

  • MD5

    264f0ad5926583f86ac4fbde7fdf615e

  • SHA1

    b3137f8a53fbd282923eddc5314237bd6b3b5894

  • SHA256

    f154f438427a1d1f4bd1dfdfec0e651834af262bf0eb97c07298d8f0e6987673

  • SHA512

    b637104fc8d271bd780e302a439c5f2c8aaed1d2a1dbff4997f1b6109ec1a3805eb65821a1b79d2e4b3ab856b6781e881d76afe1e7de2a235ced44833733e6f6

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      f154f438427a1d1f4bd1dfdfec0e651834af262bf0eb97c07298d8f0e6987673

    • Size

      711KB

    • MD5

      264f0ad5926583f86ac4fbde7fdf615e

    • SHA1

      b3137f8a53fbd282923eddc5314237bd6b3b5894

    • SHA256

      f154f438427a1d1f4bd1dfdfec0e651834af262bf0eb97c07298d8f0e6987673

    • SHA512

      b637104fc8d271bd780e302a439c5f2c8aaed1d2a1dbff4997f1b6109ec1a3805eb65821a1b79d2e4b3ab856b6781e881d76afe1e7de2a235ced44833733e6f6

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks