Overview

overview

10

Static

static

10

3a58ae4360...ea.exe

windows7_x64

10

3a58ae4360...ea.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a58ae436007a63a10f75ef4c3c9a7deb890c9a5c70faa99756e86d94570b8ea

  • Size

    5.6MB

  • Sample

    220508-2a2hbahca8

  • MD5

    010e479220ca7feee02631680d58ac93

  • SHA1

    59e86bf417a91a7f5ca79214a7e004f48552c555

  • SHA256

    3a58ae436007a63a10f75ef4c3c9a7deb890c9a5c70faa99756e86d94570b8ea

  • SHA512

    9352e95674f67d32d4ae40681d56f623c6e3e7a2f692d4efab60e5a70abda6fdde9d786e0f3b7d3c4182fdbec3f809429b71be85ae396ad740c285591ba277d7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3a58ae436007a63a10f75ef4c3c9a7deb890c9a5c70faa99756e86d94570b8ea

    • Size

      5.6MB

    • MD5

      010e479220ca7feee02631680d58ac93

    • SHA1

      59e86bf417a91a7f5ca79214a7e004f48552c555

    • SHA256

      3a58ae436007a63a10f75ef4c3c9a7deb890c9a5c70faa99756e86d94570b8ea

    • SHA512

      9352e95674f67d32d4ae40681d56f623c6e3e7a2f692d4efab60e5a70abda6fdde9d786e0f3b7d3c4182fdbec3f809429b71be85ae396ad740c285591ba277d7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks