Overview

overview

10

Static

static

10

6e5a5d865b...5d.exe

windows7_x64

10

6e5a5d865b...5d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e5a5d865b8b488f1d8d404a7f14044ee435d3b89f7cb1d9daa41b32e7bda15d

  • Size

    711KB

  • Sample

    210511-scvwq3b3f6

  • MD5

    1cfc39678c3e9d627f9a43ffb2a18540

  • SHA1

    48bfe23da1c8107ed35c11ec1ada70a528fa530f

  • SHA256

    6e5a5d865b8b488f1d8d404a7f14044ee435d3b89f7cb1d9daa41b32e7bda15d

  • SHA512

    4c7e55f6b426921ca293defd614417dff17d098ffd0970e78d623a65fb0d7d17e40bda532de65776d9c7caa69949383bda5aa6a69053d9db2b5c4dd046fbe9d2

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      6e5a5d865b8b488f1d8d404a7f14044ee435d3b89f7cb1d9daa41b32e7bda15d

    • Size

      711KB

    • MD5

      1cfc39678c3e9d627f9a43ffb2a18540

    • SHA1

      48bfe23da1c8107ed35c11ec1ada70a528fa530f

    • SHA256

      6e5a5d865b8b488f1d8d404a7f14044ee435d3b89f7cb1d9daa41b32e7bda15d

    • SHA512

      4c7e55f6b426921ca293defd614417dff17d098ffd0970e78d623a65fb0d7d17e40bda532de65776d9c7caa69949383bda5aa6a69053d9db2b5c4dd046fbe9d2

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks