Overview

overview

10

Static

static

10

8e20df53be...66.exe

windows7_x64

10

8e20df53be...66.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e20df53be9bb68eda979e2bcca752934de62316be2ecaa70454ea751d0eb266

  • Size

    1.6MB

  • Sample

    210518-mkl4jl3a9j

  • MD5

    ccd445d88d40b7be5828b953a1c09413

  • SHA1

    a28ff8043b82d18cd128e98231272f45d6727ecd

  • SHA256

    8e20df53be9bb68eda979e2bcca752934de62316be2ecaa70454ea751d0eb266

  • SHA512

    fd98c54d6fc96bf1a2a9e9acdefa0711e6483da4a63619534e1cd254136277f4a7504d7202961a5a63618b850d5fd52e5c362d6300a8d34f9ba9b8f2f9934909

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      8e20df53be9bb68eda979e2bcca752934de62316be2ecaa70454ea751d0eb266

    • Size

      1.6MB

    • MD5

      ccd445d88d40b7be5828b953a1c09413

    • SHA1

      a28ff8043b82d18cd128e98231272f45d6727ecd

    • SHA256

      8e20df53be9bb68eda979e2bcca752934de62316be2ecaa70454ea751d0eb266

    • SHA512

      fd98c54d6fc96bf1a2a9e9acdefa0711e6483da4a63619534e1cd254136277f4a7504d7202961a5a63618b850d5fd52e5c362d6300a8d34f9ba9b8f2f9934909

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks