Overview

overview

10

Static

static

10

47e5c91221...ac.exe

windows7_x64

10

47e5c91221...ac.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47e5c91221fcd5363db8e11f1eeeb69b9634eccba0317f941d2030e19c5e18ac

  • Size

    812KB

  • Sample

    210511-dr78sp3lf2

  • MD5

    a25800e35cc2b26b7dcb3dc28235fadd

  • SHA1

    96737853d15a6a3a9f6a2a28f925a1d66e5e1870

  • SHA256

    47e5c91221fcd5363db8e11f1eeeb69b9634eccba0317f941d2030e19c5e18ac

  • SHA512

    d410a23c233375a85d2bdb4558aee71d1cc65d8a6447fa1bc4f875917af22b8c095b24eedef1ee9259fdbbc9f134382ef3dcee79c72a8ecc3f941c17e5ab5d0f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      47e5c91221fcd5363db8e11f1eeeb69b9634eccba0317f941d2030e19c5e18ac

    • Size

      812KB

    • MD5

      a25800e35cc2b26b7dcb3dc28235fadd

    • SHA1

      96737853d15a6a3a9f6a2a28f925a1d66e5e1870

    • SHA256

      47e5c91221fcd5363db8e11f1eeeb69b9634eccba0317f941d2030e19c5e18ac

    • SHA512

      d410a23c233375a85d2bdb4558aee71d1cc65d8a6447fa1bc4f875917af22b8c095b24eedef1ee9259fdbbc9f134382ef3dcee79c72a8ecc3f941c17e5ab5d0f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks