Overview

overview

10

Static

static

10

b17c425c9c...e5.exe

windows7_x64

10

b17c425c9c...e5.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b17c425c9c2fd087178e36a971bd43051f5592f96cf5c0eb201b38afae7dc2e5

  • Size

    711KB

  • Sample

    220508-we7x1aeaf5

  • MD5

    01f558edab5e39527f3ec00d89783964

  • SHA1

    20abb6c52fd987a05831fb3e28aa13d7b3f817c6

  • SHA256

    b17c425c9c2fd087178e36a971bd43051f5592f96cf5c0eb201b38afae7dc2e5

  • SHA512

    a91efea1e9eec8c73cc133f1478293a5dd2b058f303b2c4cc055caa4f3074aef08b59df9ab9240e8b4deb6a4fae9ceb337147598e0312e29379101a1762b8ad0

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      b17c425c9c2fd087178e36a971bd43051f5592f96cf5c0eb201b38afae7dc2e5

    • Size

      711KB

    • MD5

      01f558edab5e39527f3ec00d89783964

    • SHA1

      20abb6c52fd987a05831fb3e28aa13d7b3f817c6

    • SHA256

      b17c425c9c2fd087178e36a971bd43051f5592f96cf5c0eb201b38afae7dc2e5

    • SHA512

      a91efea1e9eec8c73cc133f1478293a5dd2b058f303b2c4cc055caa4f3074aef08b59df9ab9240e8b4deb6a4fae9ceb337147598e0312e29379101a1762b8ad0

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks