Overview

overview

10

Static

static

10

5a812b5212...41.exe

windows7_x64

10

5a812b5212...41.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a812b521260e52edeb2965e748ca5fd097c027e50bcf0d9cae04deaec04c641

  • Size

    1.6MB

  • Sample

    220301-gfvazagdc3

  • MD5

    71a9b7eda75ef5fcd5ac266e1ba58590

  • SHA1

    207574c2f54657fa3344744853088e2610d6dae9

  • SHA256

    5a812b521260e52edeb2965e748ca5fd097c027e50bcf0d9cae04deaec04c641

  • SHA512

    cd2239cb8286c5445a8152acd014406b98b60de69d1baa9d2a6f574912fe2acc3b98f9e555928c61316256dee4776e28f648c426a4bf68e0330fb0062ede5cea

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      5a812b521260e52edeb2965e748ca5fd097c027e50bcf0d9cae04deaec04c641

    • Size

      1.6MB

    • MD5

      71a9b7eda75ef5fcd5ac266e1ba58590

    • SHA1

      207574c2f54657fa3344744853088e2610d6dae9

    • SHA256

      5a812b521260e52edeb2965e748ca5fd097c027e50bcf0d9cae04deaec04c641

    • SHA512

      cd2239cb8286c5445a8152acd014406b98b60de69d1baa9d2a6f574912fe2acc3b98f9e555928c61316256dee4776e28f648c426a4bf68e0330fb0062ede5cea

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks