Overview

overview

10

Static

static

10

a0a8eec6bd...e7.exe

windows7_x64

10

a0a8eec6bd...e7.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0a8eec6bdc68c5d1b052bb9b75ddf6d187ba52cd7d881c2e40acc75767392e7

  • Size

    711KB

  • Sample

    210511-lmdfp873fs

  • MD5

    e689cd7348b7e16d607a2ee139c9a581

  • SHA1

    2133867dfd6981b404307ff259f68fed9f964efc

  • SHA256

    a0a8eec6bdc68c5d1b052bb9b75ddf6d187ba52cd7d881c2e40acc75767392e7

  • SHA512

    aec795e21cd2cb4d75275ff0bb3b653546b6a7871d23f888db97af9bce3d122546c965dc89a4447e0ea3fa9ba8d1a935e71ad274efefc35e435c0fc4a28b7f4e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      a0a8eec6bdc68c5d1b052bb9b75ddf6d187ba52cd7d881c2e40acc75767392e7

    • Size

      711KB

    • MD5

      e689cd7348b7e16d607a2ee139c9a581

    • SHA1

      2133867dfd6981b404307ff259f68fed9f964efc

    • SHA256

      a0a8eec6bdc68c5d1b052bb9b75ddf6d187ba52cd7d881c2e40acc75767392e7

    • SHA512

      aec795e21cd2cb4d75275ff0bb3b653546b6a7871d23f888db97af9bce3d122546c965dc89a4447e0ea3fa9ba8d1a935e71ad274efefc35e435c0fc4a28b7f4e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks