Overview

overview

10

Static

static

10

6a624dc3e2...32.exe

windows7_x64

10

6a624dc3e2...32.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a624dc3e28cada408d965494d951dd22cbdaab828b7fca7b5e6d2c6b0ed1632

  • Size

    711KB

  • Sample

    220508-xf51gaachq

  • MD5

    00e23c0fee69ba546f419abd03951e82

  • SHA1

    3b3e8e8ab14e09bfc0a1fdc91ba0bcdd1ac3dbaf

  • SHA256

    6a624dc3e28cada408d965494d951dd22cbdaab828b7fca7b5e6d2c6b0ed1632

  • SHA512

    df0f2eab3b57c71e13afaf6eb5eb02fe4ff20a814cec7716c37e208b03c21a8cf33a609c3d0d4226a4765c7da7422ee33df2ca66577c50461d75da0387558d82

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      6a624dc3e28cada408d965494d951dd22cbdaab828b7fca7b5e6d2c6b0ed1632

    • Size

      711KB

    • MD5

      00e23c0fee69ba546f419abd03951e82

    • SHA1

      3b3e8e8ab14e09bfc0a1fdc91ba0bcdd1ac3dbaf

    • SHA256

      6a624dc3e28cada408d965494d951dd22cbdaab828b7fca7b5e6d2c6b0ed1632

    • SHA512

      df0f2eab3b57c71e13afaf6eb5eb02fe4ff20a814cec7716c37e208b03c21a8cf33a609c3d0d4226a4765c7da7422ee33df2ca66577c50461d75da0387558d82

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks