Overview

overview

10

Static

static

10

17f0faa8d0...c7.exe

windows7_x64

10

17f0faa8d0...c7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17f0faa8d08796b900e2362f6312a7b26f64b91a1927e4515e7a195e14fa7ac7

  • Size

    6.9MB

  • Sample

    220608-1q82nafbh6

  • MD5

    172c8ff480928fefe6649292ad511cb1

  • SHA1

    7be317fe713037756cf9fce73c13a1f510606481

  • SHA256

    17f0faa8d08796b900e2362f6312a7b26f64b91a1927e4515e7a195e14fa7ac7

  • SHA512

    0749994a650234acdcf1453649832b8ba80e461554155be7e8fa786fb5b02c276b4a09eb0b1fd78df033da09fd1ae53917b43c606bdccc0017b7004d00b7b3f7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      17f0faa8d08796b900e2362f6312a7b26f64b91a1927e4515e7a195e14fa7ac7

    • Size

      6.9MB

    • MD5

      172c8ff480928fefe6649292ad511cb1

    • SHA1

      7be317fe713037756cf9fce73c13a1f510606481

    • SHA256

      17f0faa8d08796b900e2362f6312a7b26f64b91a1927e4515e7a195e14fa7ac7

    • SHA512

      0749994a650234acdcf1453649832b8ba80e461554155be7e8fa786fb5b02c276b4a09eb0b1fd78df033da09fd1ae53917b43c606bdccc0017b7004d00b7b3f7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks