Overview

overview

10

Static

static

10

bbaa0061fc...ec.exe

windows7_x64

10

bbaa0061fc...ec.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbaa0061fc9c93d18e5411cc45989acd48cdf3adf27b0583054334774a92b9ec

  • Size

    1.6MB

  • Sample

    210511-bc7jbksdve

  • MD5

    d170c4a5fd46afb5a7e19980e3c972da

  • SHA1

    fb3d1af395a3f0f7910a9343973255b3983d7960

  • SHA256

    bbaa0061fc9c93d18e5411cc45989acd48cdf3adf27b0583054334774a92b9ec

  • SHA512

    f31751e646e2f20b630000ff01c3eef11be6b2b8a9767c858d16228a058f91d85021f2ae2d489dcc76e2b6cfd7c4deca36797fbdaaff822c2a76acd4e04929f7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      bbaa0061fc9c93d18e5411cc45989acd48cdf3adf27b0583054334774a92b9ec

    • Size

      1.6MB

    • MD5

      d170c4a5fd46afb5a7e19980e3c972da

    • SHA1

      fb3d1af395a3f0f7910a9343973255b3983d7960

    • SHA256

      bbaa0061fc9c93d18e5411cc45989acd48cdf3adf27b0583054334774a92b9ec

    • SHA512

      f31751e646e2f20b630000ff01c3eef11be6b2b8a9767c858d16228a058f91d85021f2ae2d489dcc76e2b6cfd7c4deca36797fbdaaff822c2a76acd4e04929f7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks