Overview

overview

10

Static

static

10

1e087208d4...16.exe

windows7_x64

10

1e087208d4...16.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e087208d47feadb3588302a1affa1fbb1f3d054dbca4f2bad30748df5c18116

  • Size

    1.6MB

  • Sample

    220225-elvgtafghm

  • MD5

    297dda0ff32cd2edf278e7f51a5f8b40

  • SHA1

    ba2085dc6892ea36186a0108afff41c60a21ee2e

  • SHA256

    1e087208d47feadb3588302a1affa1fbb1f3d054dbca4f2bad30748df5c18116

  • SHA512

    22abab2ddcf0828fdef50e7f55ae712e4051d4b40f3e5fe094076c32e63555c5a08ecd1694e81c8f0a9a4382b72afb43374aae43638874f9a4f89c472663b388

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      1e087208d47feadb3588302a1affa1fbb1f3d054dbca4f2bad30748df5c18116

    • Size

      1.6MB

    • MD5

      297dda0ff32cd2edf278e7f51a5f8b40

    • SHA1

      ba2085dc6892ea36186a0108afff41c60a21ee2e

    • SHA256

      1e087208d47feadb3588302a1affa1fbb1f3d054dbca4f2bad30748df5c18116

    • SHA512

      22abab2ddcf0828fdef50e7f55ae712e4051d4b40f3e5fe094076c32e63555c5a08ecd1694e81c8f0a9a4382b72afb43374aae43638874f9a4f89c472663b388

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks