Overview

overview

10

Static

static

10

c4a60c9daf...08.exe

windows7_x64

10

c4a60c9daf...08.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4a60c9daf65941a4f1413039913afeea6e3c8d620894d993cd1fa751cb02d08

  • Size

    19.5MB

  • Sample

    220502-aazj6sfac9

  • MD5

    029845e15fe95d759c95f86911af072a

  • SHA1

    014899db961b5e9cae8490ee9f20e19a4f6d1152

  • SHA256

    c4a60c9daf65941a4f1413039913afeea6e3c8d620894d993cd1fa751cb02d08

  • SHA512

    c422b08de39ffb448729ddade5c3fe203ae6116e8efe42409df0f3058b47afa1a85627a0d8ac705691864ffdd409f61837527d2366f0fba02c43ee792ee01957

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      c4a60c9daf65941a4f1413039913afeea6e3c8d620894d993cd1fa751cb02d08

    • Size

      19.5MB

    • MD5

      029845e15fe95d759c95f86911af072a

    • SHA1

      014899db961b5e9cae8490ee9f20e19a4f6d1152

    • SHA256

      c4a60c9daf65941a4f1413039913afeea6e3c8d620894d993cd1fa751cb02d08

    • SHA512

      c422b08de39ffb448729ddade5c3fe203ae6116e8efe42409df0f3058b47afa1a85627a0d8ac705691864ffdd409f61837527d2366f0fba02c43ee792ee01957

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks