Resubmissions

25-06-2021 20:02

210625-fblvfqm7an 10

18-05-2021 05:37

210518-8s36lqvle2 10

General

  • Target

    33c51b43362ef9a681a851d192942ef3857f550a3d36ca808b7d2c37abd9ea67

  • Size

    711KB

  • Sample

    210625-fblvfqm7an

  • MD5

    1cbd59d894ee4a48ec6aee6d149f4ab1

  • SHA1

    bd1b2c9041cd3bdc801db90234412f7b60c04b23

  • SHA256

    33c51b43362ef9a681a851d192942ef3857f550a3d36ca808b7d2c37abd9ea67

  • SHA512

    e101e817ca76ad90f4c736200cd6ada83f7072aa58a4139d61ba1f9df15bee39c2c6c3efa574509a3d1b9fec4a781d4a3a5763a2d0b075bd8b5e7dcd3a0faba1

Malware Config

Targets

    • Target

      33c51b43362ef9a681a851d192942ef3857f550a3d36ca808b7d2c37abd9ea67

    • Size

      711KB

    • MD5

      1cbd59d894ee4a48ec6aee6d149f4ab1

    • SHA1

      bd1b2c9041cd3bdc801db90234412f7b60c04b23

    • SHA256

      33c51b43362ef9a681a851d192942ef3857f550a3d36ca808b7d2c37abd9ea67

    • SHA512

      e101e817ca76ad90f4c736200cd6ada83f7072aa58a4139d61ba1f9df15bee39c2c6c3efa574509a3d1b9fec4a781d4a3a5763a2d0b075bd8b5e7dcd3a0faba1

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks