Overview

overview

10

Static

static

10

3b41cd7fb2...55.exe

windows7_x64

10

3b41cd7fb2...55.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b41cd7fb212205f9898dc925cbc1b87e30728f6e46639c05a2c6e5c9f0fdd55

  • Size

    1.6MB

  • Sample

    220508-19z8vshbg9

  • MD5

    023339f734d1b81bf3562fe557b89fd6

  • SHA1

    e67c49dab7bcb15a78525967687964f7d3ea760b

  • SHA256

    3b41cd7fb212205f9898dc925cbc1b87e30728f6e46639c05a2c6e5c9f0fdd55

  • SHA512

    c9da40994c3ea9e3b6e5645f7c69aca96b167927e6fa3cfa2b4d87b11d60a080899dc9a08f9e45d5eab447dc385e0832c9b6f2cf8331f91467cdc3e11c3ea386

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3b41cd7fb212205f9898dc925cbc1b87e30728f6e46639c05a2c6e5c9f0fdd55

    • Size

      1.6MB

    • MD5

      023339f734d1b81bf3562fe557b89fd6

    • SHA1

      e67c49dab7bcb15a78525967687964f7d3ea760b

    • SHA256

      3b41cd7fb212205f9898dc925cbc1b87e30728f6e46639c05a2c6e5c9f0fdd55

    • SHA512

      c9da40994c3ea9e3b6e5645f7c69aca96b167927e6fa3cfa2b4d87b11d60a080899dc9a08f9e45d5eab447dc385e0832c9b6f2cf8331f91467cdc3e11c3ea386

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks