Overview

overview

10

Static

static

10

edeaeb7959...e3.exe

windows7_x64

10

edeaeb7959...e3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edeaeb7959d9fcc33bafb1a59cbd0391cbca830d977b5ba8c9f7e97cb55e46e3

  • Size

    711KB

  • Sample

    220507-z7lf9ahfhj

  • MD5

    01c5b2f95f7f510f6eb76312ac7ad403

  • SHA1

    9e95bcce607fea674b80e0a3fce4d22917e24a61

  • SHA256

    edeaeb7959d9fcc33bafb1a59cbd0391cbca830d977b5ba8c9f7e97cb55e46e3

  • SHA512

    85556e9eafcffd43a8002a73406dd6e2f02ce02d494307777638604740add8352e341c560879d463442f2cded62deb977a719108cbcf1bfa383f384d727d7a5a

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      edeaeb7959d9fcc33bafb1a59cbd0391cbca830d977b5ba8c9f7e97cb55e46e3

    • Size

      711KB

    • MD5

      01c5b2f95f7f510f6eb76312ac7ad403

    • SHA1

      9e95bcce607fea674b80e0a3fce4d22917e24a61

    • SHA256

      edeaeb7959d9fcc33bafb1a59cbd0391cbca830d977b5ba8c9f7e97cb55e46e3

    • SHA512

      85556e9eafcffd43a8002a73406dd6e2f02ce02d494307777638604740add8352e341c560879d463442f2cded62deb977a719108cbcf1bfa383f384d727d7a5a

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks