Overview

overview

10

Static

static

10

1be3df86f2...8d.exe

windows7_x64

10

1be3df86f2...8d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1be3df86f2e5a8165d4f04ec0290de15d60db343d01f762f9de125d7dac7738d

  • Size

    711KB

  • Sample

    220508-f45k6sbagp

  • MD5

    004c8205704cdb9f09252a6f6b7358cf

  • SHA1

    e8eab0136519fa12545824dc18a3a6c8edb1747a

  • SHA256

    1be3df86f2e5a8165d4f04ec0290de15d60db343d01f762f9de125d7dac7738d

  • SHA512

    6469fd36b63e5ac97c5a999589e7cb267a93902ed9ef65f7c49ee0a4899f4338270a879c6b064f2c99b608c742b8a92a383f854c9aa883368e45562f18a1ae84

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      1be3df86f2e5a8165d4f04ec0290de15d60db343d01f762f9de125d7dac7738d

    • Size

      711KB

    • MD5

      004c8205704cdb9f09252a6f6b7358cf

    • SHA1

      e8eab0136519fa12545824dc18a3a6c8edb1747a

    • SHA256

      1be3df86f2e5a8165d4f04ec0290de15d60db343d01f762f9de125d7dac7738d

    • SHA512

      6469fd36b63e5ac97c5a999589e7cb267a93902ed9ef65f7c49ee0a4899f4338270a879c6b064f2c99b608c742b8a92a383f854c9aa883368e45562f18a1ae84

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks