Overview

overview

10

Static

static

10

179b6108d4...04.exe

windows7_x64

10

179b6108d4...04.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    179b6108d4248d03190258de18e3f45c1b54db6331807c8b03d806e0672b9204

  • Size

    711KB

  • Sample

    220502-aa77babffq

  • MD5

    013f1f2b252b10b6a436b1319c43572b

  • SHA1

    e63a6a23f279b36488ce8eae13ba4e4b07eaa4e9

  • SHA256

    179b6108d4248d03190258de18e3f45c1b54db6331807c8b03d806e0672b9204

  • SHA512

    408b562e8c6b929db0c59988208632fffa9044fb03c53768365ecee3ae21752e5ecf7d2b59bb2cb683d578ab75c6243fe7fa21fa795d40dca52c7afde0e3eb25

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      179b6108d4248d03190258de18e3f45c1b54db6331807c8b03d806e0672b9204

    • Size

      711KB

    • MD5

      013f1f2b252b10b6a436b1319c43572b

    • SHA1

      e63a6a23f279b36488ce8eae13ba4e4b07eaa4e9

    • SHA256

      179b6108d4248d03190258de18e3f45c1b54db6331807c8b03d806e0672b9204

    • SHA512

      408b562e8c6b929db0c59988208632fffa9044fb03c53768365ecee3ae21752e5ecf7d2b59bb2cb683d578ab75c6243fe7fa21fa795d40dca52c7afde0e3eb25

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks