Overview

overview

10

Static

static

10

55c9e1f4c7...e7.exe

windows7_x64

10

55c9e1f4c7...e7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55c9e1f4c771e001c43c6534d83e40d4d8703f663e52e312257ca6cd22bcfee7

  • Size

    711KB

  • Sample

    220508-etrqwsfca7

  • MD5

    0176f72de7f971db70a717ef3c19dcaf

  • SHA1

    3cfda5856e03aa6d00252291c10ded3a7d5f0579

  • SHA256

    55c9e1f4c771e001c43c6534d83e40d4d8703f663e52e312257ca6cd22bcfee7

  • SHA512

    c7ec4d33062db11bb9dbe9f2b705191dfe230b02224fe0600e4cf0b96ee444539722bfc455ecd09cf6d06921b830e48fadd84e362335db0efcf4075ef9f6a9fa

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      55c9e1f4c771e001c43c6534d83e40d4d8703f663e52e312257ca6cd22bcfee7

    • Size

      711KB

    • MD5

      0176f72de7f971db70a717ef3c19dcaf

    • SHA1

      3cfda5856e03aa6d00252291c10ded3a7d5f0579

    • SHA256

      55c9e1f4c771e001c43c6534d83e40d4d8703f663e52e312257ca6cd22bcfee7

    • SHA512

      c7ec4d33062db11bb9dbe9f2b705191dfe230b02224fe0600e4cf0b96ee444539722bfc455ecd09cf6d06921b830e48fadd84e362335db0efcf4075ef9f6a9fa

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks