Overview

overview

10

Static

static

10

20a887f00c...c9.exe

windows7_x64

10

20a887f00c...c9.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20a887f00c7a74596fe65affe93f17262f5e2dd7f4bf03ab01a9526a0d26e2c9

  • Size

    812KB

  • Sample

    210517-1ttbcw8qb6

  • MD5

    1a50a963435a10ee3bde9042d723a281

  • SHA1

    7cad44b2928aa9b2b6ffd4a47ab30eb531a27937

  • SHA256

    20a887f00c7a74596fe65affe93f17262f5e2dd7f4bf03ab01a9526a0d26e2c9

  • SHA512

    c441c494170ba58dd2923ba6f46ef645c179bc66171936b6895ac3258634201bfb7f41bee5719ff8f322ca829fc47d20fdef6a2d510e4c3dce34d5d67e7b2ddc

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      20a887f00c7a74596fe65affe93f17262f5e2dd7f4bf03ab01a9526a0d26e2c9

    • Size

      812KB

    • MD5

      1a50a963435a10ee3bde9042d723a281

    • SHA1

      7cad44b2928aa9b2b6ffd4a47ab30eb531a27937

    • SHA256

      20a887f00c7a74596fe65affe93f17262f5e2dd7f4bf03ab01a9526a0d26e2c9

    • SHA512

      c441c494170ba58dd2923ba6f46ef645c179bc66171936b6895ac3258634201bfb7f41bee5719ff8f322ca829fc47d20fdef6a2d510e4c3dce34d5d67e7b2ddc

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks