Overview

overview

10

Static

static

10

291c39330d...22.exe

windows7_x64

10

291c39330d...22.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    291c39330d4ba684fbb36872fe5242f8f8d3e96f248432adb47f61b3cd3ffe22

  • Size

    3.5MB

  • Sample

    220508-2ymn3achaq

  • MD5

    0159dadd1af327130b9ae295c5f2a0a4

  • SHA1

    cacd001a62bd3e7ad65cebfcf4dda968fc1d9d0b

  • SHA256

    291c39330d4ba684fbb36872fe5242f8f8d3e96f248432adb47f61b3cd3ffe22

  • SHA512

    a8b133a486cdc5aa9e83b0e031fadc7607f4f0b15ae1869cc46d4ca58ce12ad0c0723e48b2311125117ed92732f5b2edd3c70f08f2dc6ce48415d15d63feae2f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      291c39330d4ba684fbb36872fe5242f8f8d3e96f248432adb47f61b3cd3ffe22

    • Size

      3.5MB

    • MD5

      0159dadd1af327130b9ae295c5f2a0a4

    • SHA1

      cacd001a62bd3e7ad65cebfcf4dda968fc1d9d0b

    • SHA256

      291c39330d4ba684fbb36872fe5242f8f8d3e96f248432adb47f61b3cd3ffe22

    • SHA512

      a8b133a486cdc5aa9e83b0e031fadc7607f4f0b15ae1869cc46d4ca58ce12ad0c0723e48b2311125117ed92732f5b2edd3c70f08f2dc6ce48415d15d63feae2f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks