Overview

overview

10

Static

static

10

572fc7f7b2...20.exe

windows7_x64

10

572fc7f7b2...20.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    572fc7f7b2e91fc01e1844bf3ffb0d0737263003461bc55b7579dfc56f163e20

  • Size

    711KB

  • Sample

    220508-xvb1yafgf3

  • MD5

    029000672373e2fd44633f4c530ffa94

  • SHA1

    91461f22da7c7fda075954b4fedd8520107776fa

  • SHA256

    572fc7f7b2e91fc01e1844bf3ffb0d0737263003461bc55b7579dfc56f163e20

  • SHA512

    4b4faf903f5ac490b12410b11130e997641c746b5fe194057b0573ec4038cac4986ad5b1a8a7a6388eb2692f870897a07ea07af6d36f57ede13342c417e98d34

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      572fc7f7b2e91fc01e1844bf3ffb0d0737263003461bc55b7579dfc56f163e20

    • Size

      711KB

    • MD5

      029000672373e2fd44633f4c530ffa94

    • SHA1

      91461f22da7c7fda075954b4fedd8520107776fa

    • SHA256

      572fc7f7b2e91fc01e1844bf3ffb0d0737263003461bc55b7579dfc56f163e20

    • SHA512

      4b4faf903f5ac490b12410b11130e997641c746b5fe194057b0573ec4038cac4986ad5b1a8a7a6388eb2692f870897a07ea07af6d36f57ede13342c417e98d34

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks