Overview

overview

10

Static

static

10

c0e134136e...ad.exe

windows7_x64

10

c0e134136e...ad.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0e134136e9426cac0bc92ab6c3016254d24afa2a9ca8b21a387aa5ba4eca1ad

  • Size

    711KB

  • Sample

    220508-v77l9sdgc5

  • MD5

    001429cc65fb0f88307fda3bda3c431c

  • SHA1

    386c49bac286eda65d3e8571ebacc522a1e5f085

  • SHA256

    c0e134136e9426cac0bc92ab6c3016254d24afa2a9ca8b21a387aa5ba4eca1ad

  • SHA512

    4202f2df08689774a5118208d592c962a522b25301b1ea4d0f236f35f0f84df0eca01914888dd2b53340ce25aff6c512da986d1fa14668c6130ce7de9ec4ba00

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      c0e134136e9426cac0bc92ab6c3016254d24afa2a9ca8b21a387aa5ba4eca1ad

    • Size

      711KB

    • MD5

      001429cc65fb0f88307fda3bda3c431c

    • SHA1

      386c49bac286eda65d3e8571ebacc522a1e5f085

    • SHA256

      c0e134136e9426cac0bc92ab6c3016254d24afa2a9ca8b21a387aa5ba4eca1ad

    • SHA512

      4202f2df08689774a5118208d592c962a522b25301b1ea4d0f236f35f0f84df0eca01914888dd2b53340ce25aff6c512da986d1fa14668c6130ce7de9ec4ba00

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks