Overview

overview

10

Static

static

10

152a7860de...50.exe

windows7_x64

10

152a7860de...50.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    152a7860de68d7199f52a8577de8234f4e6aa515bed7c364a41ed2e6f65e8d50

  • Size

    3.5MB

  • Sample

    220609-j5e9fsccfk

  • MD5

    4e46fca788cd805eaf55370c68df0363

  • SHA1

    c6b7c4f2df4e51baae8e67abd2924e51723ba5f6

  • SHA256

    152a7860de68d7199f52a8577de8234f4e6aa515bed7c364a41ed2e6f65e8d50

  • SHA512

    1a8cf626562f5328d67eea70500be9f134a36e9f742bd705caae9137c4fc90757e862720c8bfec8aa919fab7b2c48a893655b877c7a0a1de6b266eca67655f74

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      152a7860de68d7199f52a8577de8234f4e6aa515bed7c364a41ed2e6f65e8d50

    • Size

      3.5MB

    • MD5

      4e46fca788cd805eaf55370c68df0363

    • SHA1

      c6b7c4f2df4e51baae8e67abd2924e51723ba5f6

    • SHA256

      152a7860de68d7199f52a8577de8234f4e6aa515bed7c364a41ed2e6f65e8d50

    • SHA512

      1a8cf626562f5328d67eea70500be9f134a36e9f742bd705caae9137c4fc90757e862720c8bfec8aa919fab7b2c48a893655b877c7a0a1de6b266eca67655f74

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks