Overview

overview

10

Static

static

10

88ec4966ff...47.exe

windows7_x64

10

88ec4966ff...47.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88ec4966ff4fa248316574d88f77ecbcd8a92134afdcf03c7fd0b2ab83226d47

  • Size

    812KB

  • Sample

    220502-aa6cqafad5

  • MD5

    01992c92309f5992c8175676f2c324a2

  • SHA1

    12e1e320480ca60fc4f2bd47b848c2104cf33995

  • SHA256

    88ec4966ff4fa248316574d88f77ecbcd8a92134afdcf03c7fd0b2ab83226d47

  • SHA512

    44192eb091b3869dd7b834de8026c7916f67362d1d638f4e4b7e12df518e5071c21221f79b93e8c112fb1e6569227208e866e037b9eca88250160e2f7d63446b

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      88ec4966ff4fa248316574d88f77ecbcd8a92134afdcf03c7fd0b2ab83226d47

    • Size

      812KB

    • MD5

      01992c92309f5992c8175676f2c324a2

    • SHA1

      12e1e320480ca60fc4f2bd47b848c2104cf33995

    • SHA256

      88ec4966ff4fa248316574d88f77ecbcd8a92134afdcf03c7fd0b2ab83226d47

    • SHA512

      44192eb091b3869dd7b834de8026c7916f67362d1d638f4e4b7e12df518e5071c21221f79b93e8c112fb1e6569227208e866e037b9eca88250160e2f7d63446b

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks