Overview

overview

10

Static

static

10

0dc94bf747...1c.exe

windows7_x64

10

0dc94bf747...1c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dc94bf747908d7ef64c12c63eff9270880f5f41ef36c5bb91b547dd503d5e1c

  • Size

    1.6MB

  • Sample

    220225-gd5nxsfac3

  • MD5

    9816975bfc605406094a0881be753676

  • SHA1

    2cad03aaaaa7db1321c4e8e24afef1c2b4015cdb

  • SHA256

    0dc94bf747908d7ef64c12c63eff9270880f5f41ef36c5bb91b547dd503d5e1c

  • SHA512

    1b6432488b6b56978fb4be5461b69cdecc2a1c95b9e10bcb555f134989786b41078a4d4df68ab827464327b517f3352d54ec15bdfe316837cf7287f430aac8a9

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      0dc94bf747908d7ef64c12c63eff9270880f5f41ef36c5bb91b547dd503d5e1c

    • Size

      1.6MB

    • MD5

      9816975bfc605406094a0881be753676

    • SHA1

      2cad03aaaaa7db1321c4e8e24afef1c2b4015cdb

    • SHA256

      0dc94bf747908d7ef64c12c63eff9270880f5f41ef36c5bb91b547dd503d5e1c

    • SHA512

      1b6432488b6b56978fb4be5461b69cdecc2a1c95b9e10bcb555f134989786b41078a4d4df68ab827464327b517f3352d54ec15bdfe316837cf7287f430aac8a9

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks