Overview

overview

10

Static

static

10

679102251e...04.exe

windows7_x64

10

679102251e...04.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    679102251e03106105cfd79d5e791304

  • Size

    711KB

  • Sample

    220603-anpl5acdb4

  • MD5

    679102251e03106105cfd79d5e791304

  • SHA1

    d5410c091a25bda569381a0a6dd01811e62ef0cb

  • SHA256

    02674442c7fefaca79082eff7c720f85c32864267160eb2c61175e24f7df4812

  • SHA512

    d816c4639ec99c3e8286887cdecb6e97acc70df870cc6e8a93c9d1dea1b984ed0ebc55369171ff75795cd064a218e044cda87676fe1be2c6babaafaad6c2a96f

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      679102251e03106105cfd79d5e791304

    • Size

      711KB

    • MD5

      679102251e03106105cfd79d5e791304

    • SHA1

      d5410c091a25bda569381a0a6dd01811e62ef0cb

    • SHA256

      02674442c7fefaca79082eff7c720f85c32864267160eb2c61175e24f7df4812

    • SHA512

      d816c4639ec99c3e8286887cdecb6e97acc70df870cc6e8a93c9d1dea1b984ed0ebc55369171ff75795cd064a218e044cda87676fe1be2c6babaafaad6c2a96f

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks