Overview

overview

10

Static

static

10

dee3f3bfd4...03.exe

windows7_x64

10

dee3f3bfd4...03.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dee3f3bfd43b26d3507297f38a669b111ff136d31fa953c937b5787cb95c2203

  • Size

    1.4MB

  • Sample

    210511-d5qp3gv6rj

  • MD5

    1d827da3dfbdae03758eee1b21157662

  • SHA1

    0f47d06201d6c97971f9fe1d764ce0767af61101

  • SHA256

    dee3f3bfd43b26d3507297f38a669b111ff136d31fa953c937b5787cb95c2203

  • SHA512

    cc385303d543db413c5e95213c7d3d1e00ba933af91d60b4a74646478ee3312a319ec4e569379bdfabf3c9aca5b407b5a99ae431a35b05ce3c2db98e7324ca5a

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      dee3f3bfd43b26d3507297f38a669b111ff136d31fa953c937b5787cb95c2203

    • Size

      1.4MB

    • MD5

      1d827da3dfbdae03758eee1b21157662

    • SHA1

      0f47d06201d6c97971f9fe1d764ce0767af61101

    • SHA256

      dee3f3bfd43b26d3507297f38a669b111ff136d31fa953c937b5787cb95c2203

    • SHA512

      cc385303d543db413c5e95213c7d3d1e00ba933af91d60b4a74646478ee3312a319ec4e569379bdfabf3c9aca5b407b5a99ae431a35b05ce3c2db98e7324ca5a

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks