Overview

overview

10

Static

static

10

b584dd9293...ad.exe

windows7_x64

10

b584dd9293...ad.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b584dd92932fb22323c023e23fb116a7676959b797e24dc57b44d4cc1a284ead

  • Size

    711KB

  • Sample

    220309-f5bz9agffr

  • MD5

    021922d7a052fa6f965cbe1c1e61e331

  • SHA1

    52312939e5ef9289090f8de5d88127431b4a3820

  • SHA256

    b584dd92932fb22323c023e23fb116a7676959b797e24dc57b44d4cc1a284ead

  • SHA512

    eff237d41f723687fee9a61c566e24539042f468a9c4ee2be00d361dc5ff840b71670deb0d606da9903ed13cebf8ae3c719748a281a3b19afa357d66b16fed11

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      b584dd92932fb22323c023e23fb116a7676959b797e24dc57b44d4cc1a284ead

    • Size

      711KB

    • MD5

      021922d7a052fa6f965cbe1c1e61e331

    • SHA1

      52312939e5ef9289090f8de5d88127431b4a3820

    • SHA256

      b584dd92932fb22323c023e23fb116a7676959b797e24dc57b44d4cc1a284ead

    • SHA512

      eff237d41f723687fee9a61c566e24539042f468a9c4ee2be00d361dc5ff840b71670deb0d606da9903ed13cebf8ae3c719748a281a3b19afa357d66b16fed11

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks