Overview

overview

10

Static

static

10

fd087d08e9...74.exe

windows7_x64

10

fd087d08e9...74.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd087d08e90e00b722d31f8378cc23224291abbe959d9fc4254987cdfcd68f74

  • Size

    711KB

  • Sample

    220508-bhvrmadhbq

  • MD5

    003d92dbf6d526aff0eff21cb88e676d

  • SHA1

    c8fb450491577da327d7db915162a498440f6a4b

  • SHA256

    fd087d08e90e00b722d31f8378cc23224291abbe959d9fc4254987cdfcd68f74

  • SHA512

    317e737d371a2bd092ca92ccd60e00d313ea2865074d4f8aa23ca2233f8fe40853d47ccd233930fbd35832def22b0d64ef86739a50c8cd492ec5382bafe57e07

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      fd087d08e90e00b722d31f8378cc23224291abbe959d9fc4254987cdfcd68f74

    • Size

      711KB

    • MD5

      003d92dbf6d526aff0eff21cb88e676d

    • SHA1

      c8fb450491577da327d7db915162a498440f6a4b

    • SHA256

      fd087d08e90e00b722d31f8378cc23224291abbe959d9fc4254987cdfcd68f74

    • SHA512

      317e737d371a2bd092ca92ccd60e00d313ea2865074d4f8aa23ca2233f8fe40853d47ccd233930fbd35832def22b0d64ef86739a50c8cd492ec5382bafe57e07

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks