Overview

overview

10

Static

static

10

93cfbdc478...fa.exe

windows7_x64

10

93cfbdc478...fa.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93cfbdc47874c037c2e875ec998e0da78468ee942158e399ebd55501b028dafa

  • Size

    711KB

  • Sample

    220508-b4r8mabfh7

  • MD5

    0137b739031b4bf46cd0734495403d3d

  • SHA1

    2d5b9b5886f4a7d4dcdf5936e5a6a95d19064235

  • SHA256

    93cfbdc47874c037c2e875ec998e0da78468ee942158e399ebd55501b028dafa

  • SHA512

    4aa52d4880e0d0942af4ab521954237d3e114105593e66146380616094baac9b2477e4fb22d554081a4df6f9773c83153b56c30ce54f59c1f90d55616e98a3aa

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      93cfbdc47874c037c2e875ec998e0da78468ee942158e399ebd55501b028dafa

    • Size

      711KB

    • MD5

      0137b739031b4bf46cd0734495403d3d

    • SHA1

      2d5b9b5886f4a7d4dcdf5936e5a6a95d19064235

    • SHA256

      93cfbdc47874c037c2e875ec998e0da78468ee942158e399ebd55501b028dafa

    • SHA512

      4aa52d4880e0d0942af4ab521954237d3e114105593e66146380616094baac9b2477e4fb22d554081a4df6f9773c83153b56c30ce54f59c1f90d55616e98a3aa

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks