Overview

overview

10

Static

static

10

cf48eafa6c...66.exe

windows7_x64

10

cf48eafa6c...66.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf48eafa6c60077ba4bb023ca39b99b6eb14967cde8bb444fa377f7544247f66

  • Size

    711KB

  • Sample

    220502-aawhhsfac6

  • MD5

    0214821304f29d91df21332c8ebdd443

  • SHA1

    5d95eeada3c794266c9a7916a8e957a9fd1ab56e

  • SHA256

    cf48eafa6c60077ba4bb023ca39b99b6eb14967cde8bb444fa377f7544247f66

  • SHA512

    46160474f1a5075b8478d59f90481ec1fa120abbb9b1ef6b434d04d9113d14fe216c2460d7b9f3deba232953c67860263ab3701c66ddee2623bd9aeed1c82359

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      cf48eafa6c60077ba4bb023ca39b99b6eb14967cde8bb444fa377f7544247f66

    • Size

      711KB

    • MD5

      0214821304f29d91df21332c8ebdd443

    • SHA1

      5d95eeada3c794266c9a7916a8e957a9fd1ab56e

    • SHA256

      cf48eafa6c60077ba4bb023ca39b99b6eb14967cde8bb444fa377f7544247f66

    • SHA512

      46160474f1a5075b8478d59f90481ec1fa120abbb9b1ef6b434d04d9113d14fe216c2460d7b9f3deba232953c67860263ab3701c66ddee2623bd9aeed1c82359

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks