Overview

overview

10

Static

static

10

5d0e50df7e...e7.exe

windows7_x64

10

5d0e50df7e...e7.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d0e50df7e238b5fff23b89538f18cf101672f5dbe238b7e74b149ca96f811e7

  • Size

    1.6MB

  • Sample

    210511-hp5659kpj2

  • MD5

    ea01d456c5cff0a858fc03e8c09a9a8c

  • SHA1

    2388e1d567bdc06a26de74fe96d07a666ddf1635

  • SHA256

    5d0e50df7e238b5fff23b89538f18cf101672f5dbe238b7e74b149ca96f811e7

  • SHA512

    79207e31064777270793610494351c81a3421d7cbf90d7aa46e15394ff0e9ebd2d273f3dc60fa60baf70e04aec11d31162f0f73285bc4e2a9e73cc48f13123a6

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      5d0e50df7e238b5fff23b89538f18cf101672f5dbe238b7e74b149ca96f811e7

    • Size

      1.6MB

    • MD5

      ea01d456c5cff0a858fc03e8c09a9a8c

    • SHA1

      2388e1d567bdc06a26de74fe96d07a666ddf1635

    • SHA256

      5d0e50df7e238b5fff23b89538f18cf101672f5dbe238b7e74b149ca96f811e7

    • SHA512

      79207e31064777270793610494351c81a3421d7cbf90d7aa46e15394ff0e9ebd2d273f3dc60fa60baf70e04aec11d31162f0f73285bc4e2a9e73cc48f13123a6

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks