Overview

overview

10

Static

static

10

8d1eb6efeb...2a.exe

windows7_x64

10

8d1eb6efeb...2a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d1eb6efeb146b5c250df933db3f156a95bc9af2d6c9fab93c5dbc920289bf2a

  • Size

    1.6MB

  • Sample

    220302-fpca3seffn

  • MD5

    a191ee0f81f64b5592382274bbaadbb6

  • SHA1

    8d310664d52d0d1ccf8ef91458cf61fb4229c4b3

  • SHA256

    8d1eb6efeb146b5c250df933db3f156a95bc9af2d6c9fab93c5dbc920289bf2a

  • SHA512

    9b08dc38bb378e8e2ef0cb9d51101cf7eecf28e017e3fe8b219314c187500f7f5be3ee386b4ddb2c3c14c2d7f94b0ffcb1c5222257b8e1554145b4936f2f6cfb

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      8d1eb6efeb146b5c250df933db3f156a95bc9af2d6c9fab93c5dbc920289bf2a

    • Size

      1.6MB

    • MD5

      a191ee0f81f64b5592382274bbaadbb6

    • SHA1

      8d310664d52d0d1ccf8ef91458cf61fb4229c4b3

    • SHA256

      8d1eb6efeb146b5c250df933db3f156a95bc9af2d6c9fab93c5dbc920289bf2a

    • SHA512

      9b08dc38bb378e8e2ef0cb9d51101cf7eecf28e017e3fe8b219314c187500f7f5be3ee386b4ddb2c3c14c2d7f94b0ffcb1c5222257b8e1554145b4936f2f6cfb

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks