Overview

overview

10

Static

static

10

2d20a87b01...3b.exe

windows7_x64

10

2d20a87b01...3b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d20a87b01c7f0080298fecde72b6e544f8e0d2dce1929ecb72d5432f8ce4f3b

  • Size

    711KB

  • Sample

    210511-wppa57yy9e

  • MD5

    21924e99d3219df993bead44300d54d8

  • SHA1

    0feb97ffe1fbb669781db6b3bfe79c94ca8267d2

  • SHA256

    2d20a87b01c7f0080298fecde72b6e544f8e0d2dce1929ecb72d5432f8ce4f3b

  • SHA512

    09a06963587db9279be0b6c0c32c374b0555da875f74f8e9739d5d1d8eed305205dad1bae6dcc21191e3f71d08528e6111ebc4e2357950abf2a52410eb4e6621

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      2d20a87b01c7f0080298fecde72b6e544f8e0d2dce1929ecb72d5432f8ce4f3b

    • Size

      711KB

    • MD5

      21924e99d3219df993bead44300d54d8

    • SHA1

      0feb97ffe1fbb669781db6b3bfe79c94ca8267d2

    • SHA256

      2d20a87b01c7f0080298fecde72b6e544f8e0d2dce1929ecb72d5432f8ce4f3b

    • SHA512

      09a06963587db9279be0b6c0c32c374b0555da875f74f8e9739d5d1d8eed305205dad1bae6dcc21191e3f71d08528e6111ebc4e2357950abf2a52410eb4e6621

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks