Overview

overview

10

Static

static

10

ffcfe2d961...b9.exe

windows7_x64

10

ffcfe2d961...b9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffcfe2d9615ba871da4ad9ef0977eaef4900621e9c2fbcdb8d7203060cfe59b9

  • Size

    711KB

  • Sample

    220508-vad9fscfa3

  • MD5

    0155bc5b3d509a815f9f424ac5e4655a

  • SHA1

    fab1402287fdfd14f49130ceed389e5bac847874

  • SHA256

    ffcfe2d9615ba871da4ad9ef0977eaef4900621e9c2fbcdb8d7203060cfe59b9

  • SHA512

    c0b255d11cd342d2a6a795a3e492df474b31c66cf3a3974d6c002e6dda8f82d9d61c34676d4a621e09676450f9b44aee718f12efebfbfab7ff131404441aa541

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ffcfe2d9615ba871da4ad9ef0977eaef4900621e9c2fbcdb8d7203060cfe59b9

    • Size

      711KB

    • MD5

      0155bc5b3d509a815f9f424ac5e4655a

    • SHA1

      fab1402287fdfd14f49130ceed389e5bac847874

    • SHA256

      ffcfe2d9615ba871da4ad9ef0977eaef4900621e9c2fbcdb8d7203060cfe59b9

    • SHA512

      c0b255d11cd342d2a6a795a3e492df474b31c66cf3a3974d6c002e6dda8f82d9d61c34676d4a621e09676450f9b44aee718f12efebfbfab7ff131404441aa541

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks