Overview

overview

10

Static

static

10

9500c92c37...b5.exe

windows7_x64

10

9500c92c37...b5.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9500c92c3794739d67ade0e134f250fb7f755de2268521187195fa5ced6921b5

  • Size

    1.6MB

  • Sample

    210511-agz7xz8cej

  • MD5

    a335e95d91454a553d1e8b140c4b156e

  • SHA1

    f4b71573e41099cc18db49156bf899659612a865

  • SHA256

    9500c92c3794739d67ade0e134f250fb7f755de2268521187195fa5ced6921b5

  • SHA512

    de6e73556b111f774ee0a5a7a66e1dab37feec03fd3a25f841b15f93db37734d6f594ecf961f9901f4ff66d27f4b125d064cb549c06ee4ffe80f93cb06a6ad42

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      9500c92c3794739d67ade0e134f250fb7f755de2268521187195fa5ced6921b5

    • Size

      1.6MB

    • MD5

      a335e95d91454a553d1e8b140c4b156e

    • SHA1

      f4b71573e41099cc18db49156bf899659612a865

    • SHA256

      9500c92c3794739d67ade0e134f250fb7f755de2268521187195fa5ced6921b5

    • SHA512

      de6e73556b111f774ee0a5a7a66e1dab37feec03fd3a25f841b15f93db37734d6f594ecf961f9901f4ff66d27f4b125d064cb549c06ee4ffe80f93cb06a6ad42

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks