Overview

overview

10

Static

static

10

7af04007b9...56.exe

windows7_x64

10

7af04007b9...56.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7af04007b96ead438fa5b76d1273037a28a9cf31e16e2bc447142635a43c2356

  • Size

    10.4MB

  • Sample

    220329-24krnagfgl

  • MD5

    00b86db177e6a2074dc695e0725b937a

  • SHA1

    20825d031e91bab41311924c40c6fc123dcae819

  • SHA256

    7af04007b96ead438fa5b76d1273037a28a9cf31e16e2bc447142635a43c2356

  • SHA512

    a91a7c95eb1f5afc1843ccfee1c9e0910befe0d097453813a36067413f3694d85d771abe3057ca30803785f7f603ab54149310da6dd89db6b7adff23a2eb54b2

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      7af04007b96ead438fa5b76d1273037a28a9cf31e16e2bc447142635a43c2356

    • Size

      10.4MB

    • MD5

      00b86db177e6a2074dc695e0725b937a

    • SHA1

      20825d031e91bab41311924c40c6fc123dcae819

    • SHA256

      7af04007b96ead438fa5b76d1273037a28a9cf31e16e2bc447142635a43c2356

    • SHA512

      a91a7c95eb1f5afc1843ccfee1c9e0910befe0d097453813a36067413f3694d85d771abe3057ca30803785f7f603ab54149310da6dd89db6b7adff23a2eb54b2

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks