Overview

overview

10

Static

static

10

acd0613f2a...ff.exe

windows7_x64

10

acd0613f2a...ff.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acd0613f2a1ce61f79c566e7e814d936baebe300550550e84bb6c95343c961ff

  • Size

    1.6MB

  • Sample

    220302-cdf84scbh7

  • MD5

    2e9d8938b9c0abd3b1ef2fc8f3a9df4f

  • SHA1

    b2529725f4ef2acd0807e21ec25f10d86b3609f1

  • SHA256

    acd0613f2a1ce61f79c566e7e814d936baebe300550550e84bb6c95343c961ff

  • SHA512

    5c160ff60acaef6426b1a9afea4cd0afd9b88cce1a8e5890f9d0e32c32d3dac007ede417fbb34f77d68265f11fb3a4289e4c8fec2a42858584c9f0ae6b64bf55

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      acd0613f2a1ce61f79c566e7e814d936baebe300550550e84bb6c95343c961ff

    • Size

      1.6MB

    • MD5

      2e9d8938b9c0abd3b1ef2fc8f3a9df4f

    • SHA1

      b2529725f4ef2acd0807e21ec25f10d86b3609f1

    • SHA256

      acd0613f2a1ce61f79c566e7e814d936baebe300550550e84bb6c95343c961ff

    • SHA512

      5c160ff60acaef6426b1a9afea4cd0afd9b88cce1a8e5890f9d0e32c32d3dac007ede417fbb34f77d68265f11fb3a4289e4c8fec2a42858584c9f0ae6b64bf55

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks