Overview

overview

10

Static

static

10

f22c5c0368...73.exe

windows7_x64

10

f22c5c0368...73.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f22c5c0368baa97100cd60aefc96fe5b0b95b62d05004ac8930674cb72e67d73

  • Size

    711KB

  • Sample

    220309-eegmdadbc3

  • MD5

    004fadadf89ff20454cddd727f2022be

  • SHA1

    2f4b35f6c8a8d708ecf9db8fe1f490dea6f3b1fe

  • SHA256

    f22c5c0368baa97100cd60aefc96fe5b0b95b62d05004ac8930674cb72e67d73

  • SHA512

    c3d2782c09c726fedd6b4a5e7b8a06704e5f3f0ba8fbade73f56babf69cc8398a2d4fcd01a2ce536c0c373819fa83785b4227ec5ef5f5727a85efdca72f729f4

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      f22c5c0368baa97100cd60aefc96fe5b0b95b62d05004ac8930674cb72e67d73

    • Size

      711KB

    • MD5

      004fadadf89ff20454cddd727f2022be

    • SHA1

      2f4b35f6c8a8d708ecf9db8fe1f490dea6f3b1fe

    • SHA256

      f22c5c0368baa97100cd60aefc96fe5b0b95b62d05004ac8930674cb72e67d73

    • SHA512

      c3d2782c09c726fedd6b4a5e7b8a06704e5f3f0ba8fbade73f56babf69cc8398a2d4fcd01a2ce536c0c373819fa83785b4227ec5ef5f5727a85efdca72f729f4

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks