Overview

overview

10

Static

static

10

6e46090006...4c.exe

windows7_x64

10

6e46090006...4c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e460900068bd42e5f56c2ef88853c135361bdb329b6d9e53e25ca88c4c7754c

  • Size

    711KB

  • Sample

    220301-eekn2ahchl

  • MD5

    45dfa6f043b0cb172d4fae2d22593532

  • SHA1

    d0c8ace2a28def75bd3125495e91fec62b2f9ea2

  • SHA256

    6e460900068bd42e5f56c2ef88853c135361bdb329b6d9e53e25ca88c4c7754c

  • SHA512

    98564476677820ec664194a658fcacb78d7796ba3ad4c1adb28afd93173bb4151a43f9b58cae42664f26591afa6d64c48516a46127d68164eb7661bb7a0206b7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      6e460900068bd42e5f56c2ef88853c135361bdb329b6d9e53e25ca88c4c7754c

    • Size

      711KB

    • MD5

      45dfa6f043b0cb172d4fae2d22593532

    • SHA1

      d0c8ace2a28def75bd3125495e91fec62b2f9ea2

    • SHA256

      6e460900068bd42e5f56c2ef88853c135361bdb329b6d9e53e25ca88c4c7754c

    • SHA512

      98564476677820ec664194a658fcacb78d7796ba3ad4c1adb28afd93173bb4151a43f9b58cae42664f26591afa6d64c48516a46127d68164eb7661bb7a0206b7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks