Overview

overview

10

Static

static

10

62b9801985...3a.exe

windows7_x64

10

62b9801985...3a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62b9801985d1049b21f441f44608df4eff287eb6e491cf081ec9119fa9ce383a

  • Size

    711KB

  • Sample

    220309-sgvhxacdgl

  • MD5

    020d33050cf4faba93d3e29ffa9719ea

  • SHA1

    981685993bba3bd5ec5f2114ee62c13694f0b195

  • SHA256

    62b9801985d1049b21f441f44608df4eff287eb6e491cf081ec9119fa9ce383a

  • SHA512

    7da21c146d45066ba1945bb7627ed7e918c4a3eb2e0be44c561618d3e4e17dd9b3e468c4a485375746eed37e782425b43d8f81efe7bfb00664b3380d367fae2e

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      62b9801985d1049b21f441f44608df4eff287eb6e491cf081ec9119fa9ce383a

    • Size

      711KB

    • MD5

      020d33050cf4faba93d3e29ffa9719ea

    • SHA1

      981685993bba3bd5ec5f2114ee62c13694f0b195

    • SHA256

      62b9801985d1049b21f441f44608df4eff287eb6e491cf081ec9119fa9ce383a

    • SHA512

      7da21c146d45066ba1945bb7627ed7e918c4a3eb2e0be44c561618d3e4e17dd9b3e468c4a485375746eed37e782425b43d8f81efe7bfb00664b3380d367fae2e

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks