Overview

overview

10

Static

static

10

9c3c5eeab8...79.exe

windows7_x64

10

9c3c5eeab8...79.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c3c5eeab82227e6bb43af1b64cc0dcdd7d27133d6319cdb31500649e8173379

  • Size

    6.3MB

  • Sample

    220510-3rrj4saeg5

  • MD5

    0553dcbf35a03442e96f36c9f73d15f1

  • SHA1

    44f883196d6d11b791ed35e70967fdac3e5db261

  • SHA256

    9c3c5eeab82227e6bb43af1b64cc0dcdd7d27133d6319cdb31500649e8173379

  • SHA512

    9eded2f030edbfba581f0dfdf6b51fa1b9d8bbc320cec93070beb0adad4dfa1f4a0aee2faf8d2bef18049267179da6f7eafe761cae4e954722361e2a0bacc749

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      9c3c5eeab82227e6bb43af1b64cc0dcdd7d27133d6319cdb31500649e8173379

    • Size

      6.3MB

    • MD5

      0553dcbf35a03442e96f36c9f73d15f1

    • SHA1

      44f883196d6d11b791ed35e70967fdac3e5db261

    • SHA256

      9c3c5eeab82227e6bb43af1b64cc0dcdd7d27133d6319cdb31500649e8173379

    • SHA512

      9eded2f030edbfba581f0dfdf6b51fa1b9d8bbc320cec93070beb0adad4dfa1f4a0aee2faf8d2bef18049267179da6f7eafe761cae4e954722361e2a0bacc749

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks