Overview

overview

10

Static

static

10

09e6dcf339...37.exe

windows7_x64

10

09e6dcf339...37.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09e6dcf33951c5282d3f277aa344121d4c9939daa56f2cb8199f5e93454f7c37

  • Size

    711KB

  • Sample

    210511-mcbh6ad41j

  • MD5

    cb8424cbd3961a5e8f7df0e3145e8fe5

  • SHA1

    874ed52ac22d38208e05716a4af8def73106deab

  • SHA256

    09e6dcf33951c5282d3f277aa344121d4c9939daa56f2cb8199f5e93454f7c37

  • SHA512

    2e0e24b131c75586900689bad1b2ce13f273687321ec8e9410a196f466da601750cc8e88444f8c5cf49074240a0c2878cc2ff52aed4bca56ad28ddd070bc57e2

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      09e6dcf33951c5282d3f277aa344121d4c9939daa56f2cb8199f5e93454f7c37

    • Size

      711KB

    • MD5

      cb8424cbd3961a5e8f7df0e3145e8fe5

    • SHA1

      874ed52ac22d38208e05716a4af8def73106deab

    • SHA256

      09e6dcf33951c5282d3f277aa344121d4c9939daa56f2cb8199f5e93454f7c37

    • SHA512

      2e0e24b131c75586900689bad1b2ce13f273687321ec8e9410a196f466da601750cc8e88444f8c5cf49074240a0c2878cc2ff52aed4bca56ad28ddd070bc57e2

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks