Overview

overview

10

Static

static

10

0e5e4038fe...83.exe

windows7_x64

10

0e5e4038fe...83.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e5e4038fe3829939192b3252a3d83d07f5d5746ff699369f87a8388fdda7a83

  • Size

    1.4MB

  • Sample

    220604-xvfzwsccb7

  • MD5

    56f406723654bc62f206400bbef4d3ba

  • SHA1

    3e2a1756244d269352610f50ea0c85ad272784d3

  • SHA256

    0e5e4038fe3829939192b3252a3d83d07f5d5746ff699369f87a8388fdda7a83

  • SHA512

    3a1acdf22741cb58bd33d891ce92c94e08685aa8622cf94041b7d7ba59b5449c4bc2770e7d7b15b78325f8d84fd849c484d126a255a4a7697011fb104a688db9

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      0e5e4038fe3829939192b3252a3d83d07f5d5746ff699369f87a8388fdda7a83

    • Size

      1.4MB

    • MD5

      56f406723654bc62f206400bbef4d3ba

    • SHA1

      3e2a1756244d269352610f50ea0c85ad272784d3

    • SHA256

      0e5e4038fe3829939192b3252a3d83d07f5d5746ff699369f87a8388fdda7a83

    • SHA512

      3a1acdf22741cb58bd33d891ce92c94e08685aa8622cf94041b7d7ba59b5449c4bc2770e7d7b15b78325f8d84fd849c484d126a255a4a7697011fb104a688db9

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks