Overview

overview

10

Static

static

10

1158cc1e91...ad.exe

windows7_x64

10

1158cc1e91...ad.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1158cc1e91b94ea6bebb315f30a3df7de448f308d7ff8b037d0ffaa0be7d35ad

  • Size

    1.4MB

  • Sample

    220604-hr5rhscag3

  • MD5

    328bd30a530b10ff99a1422700da29ac

  • SHA1

    80656d4a6d6c5cd4a606e83263cbc37cdae82ad1

  • SHA256

    1158cc1e91b94ea6bebb315f30a3df7de448f308d7ff8b037d0ffaa0be7d35ad

  • SHA512

    7db31259904158e931875f8b4a3a45a9ac8ac3cb9517710b52ea4a85dca9fede94b61f0de6e082dd501d858ad3985f1ce6eaddd01c755475b3075f2314878903

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      1158cc1e91b94ea6bebb315f30a3df7de448f308d7ff8b037d0ffaa0be7d35ad

    • Size

      1.4MB

    • MD5

      328bd30a530b10ff99a1422700da29ac

    • SHA1

      80656d4a6d6c5cd4a606e83263cbc37cdae82ad1

    • SHA256

      1158cc1e91b94ea6bebb315f30a3df7de448f308d7ff8b037d0ffaa0be7d35ad

    • SHA512

      7db31259904158e931875f8b4a3a45a9ac8ac3cb9517710b52ea4a85dca9fede94b61f0de6e082dd501d858ad3985f1ce6eaddd01c755475b3075f2314878903

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks