Overview

overview

10

Static

static

10

92bc8327b5...98.exe

windows7_x64

10

92bc8327b5...98.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92bc8327b537089781509d5438502e0557f7485b38d4086d12684a45faf89398

  • Size

    711KB

  • Sample

    210511-bqep2nlmre

  • MD5

    1f814612d022d903221eece4c5d5effa

  • SHA1

    26cae41a4cdba2ad3f65e1ad236372488a169a19

  • SHA256

    92bc8327b537089781509d5438502e0557f7485b38d4086d12684a45faf89398

  • SHA512

    ed5d8106bc73f11883147490862df3b213969fe620e82052a5ab751e5fec4fefe7f2064f01d216e56717c70923e697d87e686c5665b466964f4784c35a659cbd

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      92bc8327b537089781509d5438502e0557f7485b38d4086d12684a45faf89398

    • Size

      711KB

    • MD5

      1f814612d022d903221eece4c5d5effa

    • SHA1

      26cae41a4cdba2ad3f65e1ad236372488a169a19

    • SHA256

      92bc8327b537089781509d5438502e0557f7485b38d4086d12684a45faf89398

    • SHA512

      ed5d8106bc73f11883147490862df3b213969fe620e82052a5ab751e5fec4fefe7f2064f01d216e56717c70923e697d87e686c5665b466964f4784c35a659cbd

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks