Overview

overview

10

Static

static

10

46c3557595...87.exe

windows7_x64

10

46c3557595...87.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46c3557595fe262737729bf4c3b69ec9ac243c876cee4eafac4cbb09a3565f87

  • Size

    2.8MB

  • Sample

    220508-11alvagha6

  • MD5

    042c65cb10f642fbeb7d1cb36c561cc4

  • SHA1

    2b8303594e2fd67c11bf5485760e3d86c35353e8

  • SHA256

    46c3557595fe262737729bf4c3b69ec9ac243c876cee4eafac4cbb09a3565f87

  • SHA512

    da0839e5ec1be0c31d1bf3805bd1649fb948421f78b6f41ac2e2ad02f2b7723cb090c2dc330cb318a55b53b858b2811b423b28e990cf7fc4cccc274bc4c32402

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      46c3557595fe262737729bf4c3b69ec9ac243c876cee4eafac4cbb09a3565f87

    • Size

      2.8MB

    • MD5

      042c65cb10f642fbeb7d1cb36c561cc4

    • SHA1

      2b8303594e2fd67c11bf5485760e3d86c35353e8

    • SHA256

      46c3557595fe262737729bf4c3b69ec9ac243c876cee4eafac4cbb09a3565f87

    • SHA512

      da0839e5ec1be0c31d1bf3805bd1649fb948421f78b6f41ac2e2ad02f2b7723cb090c2dc330cb318a55b53b858b2811b423b28e990cf7fc4cccc274bc4c32402

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks