Overview

overview

10

Static

static

10

1f39bd627d...13.exe

windows7_x64

10

1f39bd627d...13.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f39bd627dde5fcc894a86bcd46f7e21d40c8ed36188ef671fe0ac92b3440f13

  • Size

    711KB

  • Sample

    210518-84rjtd52se

  • MD5

    d4053e48613bb7d65c0ca99f13b74030

  • SHA1

    d566f5292cb33007fcd76907ff566943c9a4c371

  • SHA256

    1f39bd627dde5fcc894a86bcd46f7e21d40c8ed36188ef671fe0ac92b3440f13

  • SHA512

    b4aa4c976fd061fb2c93b83f28ba23e389d994c034cb4d065fdf0ddba4e9e0192f7782a3194ff2e8b5d83486ffc55171a4a8887772c4a072c531d9c5cb15ab47

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      1f39bd627dde5fcc894a86bcd46f7e21d40c8ed36188ef671fe0ac92b3440f13

    • Size

      711KB

    • MD5

      d4053e48613bb7d65c0ca99f13b74030

    • SHA1

      d566f5292cb33007fcd76907ff566943c9a4c371

    • SHA256

      1f39bd627dde5fcc894a86bcd46f7e21d40c8ed36188ef671fe0ac92b3440f13

    • SHA512

      b4aa4c976fd061fb2c93b83f28ba23e389d994c034cb4d065fdf0ddba4e9e0192f7782a3194ff2e8b5d83486ffc55171a4a8887772c4a072c531d9c5cb15ab47

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks