Overview

overview

10

Static

static

10

9e904a8c49...08.exe

windows7_x64

10

9e904a8c49...08.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e904a8c4916c0d96c9acbae0f7fe12caf6d80e672d4bb84bd654995d0866308

  • Size

    711KB

  • Sample

    210511-812cj4nsj2

  • MD5

    a4f365c53c586eb74fb84c34060d5688

  • SHA1

    48c8c9f24ba5cfb44abb080ed1e879ff55dd37ae

  • SHA256

    9e904a8c4916c0d96c9acbae0f7fe12caf6d80e672d4bb84bd654995d0866308

  • SHA512

    805473f987e851c81c7208b020e12ba422e78aff04b5bbcc2c369a8b2553395f2f30dfecd9dddbea92dc42ad8b5ed98c9b09a60f6bb929d8d352c583c33505d9

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      9e904a8c4916c0d96c9acbae0f7fe12caf6d80e672d4bb84bd654995d0866308

    • Size

      711KB

    • MD5

      a4f365c53c586eb74fb84c34060d5688

    • SHA1

      48c8c9f24ba5cfb44abb080ed1e879ff55dd37ae

    • SHA256

      9e904a8c4916c0d96c9acbae0f7fe12caf6d80e672d4bb84bd654995d0866308

    • SHA512

      805473f987e851c81c7208b020e12ba422e78aff04b5bbcc2c369a8b2553395f2f30dfecd9dddbea92dc42ad8b5ed98c9b09a60f6bb929d8d352c583c33505d9

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks