Overview

overview

10

Static

static

10

ee6f529088...16.exe

windows7_x64

10

ee6f529088...16.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee6f5290884acfd81a619eefcf20a46688ca5ff3f9de8ab08f486dd9e2d6e216

  • Size

    1.6MB

  • Sample

    220510-yd8t1sgha5

  • MD5

    00ed0c27c905b94f9a7f831046fbec14

  • SHA1

    6ba4911042041f3b4ae7f00515734f5d9b6b96d2

  • SHA256

    ee6f5290884acfd81a619eefcf20a46688ca5ff3f9de8ab08f486dd9e2d6e216

  • SHA512

    d2a078404c82948dc6f45395a1d9695f54b259559d39857ab30310e25242cbe62a1f5256718ae5be32fa8446a598587b24dc8994fd1f4bbfb266781d1e00ed96

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ee6f5290884acfd81a619eefcf20a46688ca5ff3f9de8ab08f486dd9e2d6e216

    • Size

      1.6MB

    • MD5

      00ed0c27c905b94f9a7f831046fbec14

    • SHA1

      6ba4911042041f3b4ae7f00515734f5d9b6b96d2

    • SHA256

      ee6f5290884acfd81a619eefcf20a46688ca5ff3f9de8ab08f486dd9e2d6e216

    • SHA512

      d2a078404c82948dc6f45395a1d9695f54b259559d39857ab30310e25242cbe62a1f5256718ae5be32fa8446a598587b24dc8994fd1f4bbfb266781d1e00ed96

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks