Overview

overview

10

Static

static

10

706154d753...49.exe

windows7_x64

10

706154d753...49.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    706154d7539c441dba45dedff7f0fcae939f79461fef8bc6036b7aff1e79ee49

  • Size

    1.6MB

  • Sample

    210511-jnx6qft7jn

  • MD5

    ba43fbf5a53dc079a26e4d35380a6aad

  • SHA1

    0dc1c7e89760eececb89e3cbf9d2027f7fcaf5e4

  • SHA256

    706154d7539c441dba45dedff7f0fcae939f79461fef8bc6036b7aff1e79ee49

  • SHA512

    3949beb711c635a274afe4d43a7545ae0d140421bd2e7697c46c08a021b00f7a1278c813e2e993832f0aa143c370e8c5cc95b7da58ad8fbe1fd2376f258bf215

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      706154d7539c441dba45dedff7f0fcae939f79461fef8bc6036b7aff1e79ee49

    • Size

      1.6MB

    • MD5

      ba43fbf5a53dc079a26e4d35380a6aad

    • SHA1

      0dc1c7e89760eececb89e3cbf9d2027f7fcaf5e4

    • SHA256

      706154d7539c441dba45dedff7f0fcae939f79461fef8bc6036b7aff1e79ee49

    • SHA512

      3949beb711c635a274afe4d43a7545ae0d140421bd2e7697c46c08a021b00f7a1278c813e2e993832f0aa143c370e8c5cc95b7da58ad8fbe1fd2376f258bf215

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks