Overview

overview

10

Static

static

10

aa64c9d5a3...a2.exe

windows7_x64

10

aa64c9d5a3...a2.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa64c9d5a3bbf790aa82fa5c24af14b42fc24fbacba01418cf48fdf5ae1b72a2

  • Size

    711KB

  • Sample

    220502-aa4h5afad4

  • MD5

    028b671b4358e9a527b6e5532a156efc

  • SHA1

    c911d614333ccbd03739f011706926699dffb324

  • SHA256

    aa64c9d5a3bbf790aa82fa5c24af14b42fc24fbacba01418cf48fdf5ae1b72a2

  • SHA512

    6ad00a03dd1c208e0a34676d2884ccdb5b6c2cc6a4e5275bd1d879d98422c63785994e862000f03c78400f43d11169c20ad756ebccfc79c579650fdf4125079a

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      aa64c9d5a3bbf790aa82fa5c24af14b42fc24fbacba01418cf48fdf5ae1b72a2

    • Size

      711KB

    • MD5

      028b671b4358e9a527b6e5532a156efc

    • SHA1

      c911d614333ccbd03739f011706926699dffb324

    • SHA256

      aa64c9d5a3bbf790aa82fa5c24af14b42fc24fbacba01418cf48fdf5ae1b72a2

    • SHA512

      6ad00a03dd1c208e0a34676d2884ccdb5b6c2cc6a4e5275bd1d879d98422c63785994e862000f03c78400f43d11169c20ad756ebccfc79c579650fdf4125079a

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks