Overview

overview

10

Static

static

10

ea8aeb33e7...b8.exe

windows7_x64

10

ea8aeb33e7...b8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea8aeb33e74b0166cdbb8c0cebab9df3a7e4d8dc5251e5227e5096914658b1b8

  • Size

    1.6MB

  • Sample

    220510-yf1lesghf8

  • MD5

    02a3b501086875dfec23b5ebd359adac

  • SHA1

    da2a1a32bdb21fd240d105b97cc95758ebf7698f

  • SHA256

    ea8aeb33e74b0166cdbb8c0cebab9df3a7e4d8dc5251e5227e5096914658b1b8

  • SHA512

    8b9a843a381078deb831b28c02a38c0e66136033d78172adb4a87ccbef94cb20e4bdef5b75bbdfebba066ec991e909279b28055f0f0c0a4e850820e66155bfed

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      ea8aeb33e74b0166cdbb8c0cebab9df3a7e4d8dc5251e5227e5096914658b1b8

    • Size

      1.6MB

    • MD5

      02a3b501086875dfec23b5ebd359adac

    • SHA1

      da2a1a32bdb21fd240d105b97cc95758ebf7698f

    • SHA256

      ea8aeb33e74b0166cdbb8c0cebab9df3a7e4d8dc5251e5227e5096914658b1b8

    • SHA512

      8b9a843a381078deb831b28c02a38c0e66136033d78172adb4a87ccbef94cb20e4bdef5b75bbdfebba066ec991e909279b28055f0f0c0a4e850820e66155bfed

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks