Overview

overview

10

Static

static

10

ab1a6d28b5...7f.exe

windows7_x64

10

ab1a6d28b5...7f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab1a6d28b54fa5a83402f868aa2031fdebf68cdd6c0ad1bbdc3fc354225bfd7f

  • Size

    711KB

  • Sample

    220309-gcv34aeac7

  • MD5

    00013a69b22a88dd166f3caf7c5350ec

  • SHA1

    edde0d67542ac602917135e13c6f843f1c54af76

  • SHA256

    ab1a6d28b54fa5a83402f868aa2031fdebf68cdd6c0ad1bbdc3fc354225bfd7f

  • SHA512

    b2e62522da34e7f09e969620d85d9bcac1c1dae56d715312bff727659589a6817bddffdfe3784c7dcda7430d52bc05bb765136346ee45f9e1b50072c2c39b88f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ab1a6d28b54fa5a83402f868aa2031fdebf68cdd6c0ad1bbdc3fc354225bfd7f

    • Size

      711KB

    • MD5

      00013a69b22a88dd166f3caf7c5350ec

    • SHA1

      edde0d67542ac602917135e13c6f843f1c54af76

    • SHA256

      ab1a6d28b54fa5a83402f868aa2031fdebf68cdd6c0ad1bbdc3fc354225bfd7f

    • SHA512

      b2e62522da34e7f09e969620d85d9bcac1c1dae56d715312bff727659589a6817bddffdfe3784c7dcda7430d52bc05bb765136346ee45f9e1b50072c2c39b88f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks