Overview

overview

10

Static

static

10

234ac64f45...13.exe

windows7_x64

10

234ac64f45...13.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    234ac64f45ab1e094f06fae8b7d021d0abe9615f87265ddf7ca3e7c01d8e5e13

  • Size

    711KB

  • Sample

    220612-cjemgahfhl

  • MD5

    fe7cf6a55fb66ee829febf37f93930f3

  • SHA1

    c3c12335f83b3d1068f9c5a01c536039b8cdc646

  • SHA256

    234ac64f45ab1e094f06fae8b7d021d0abe9615f87265ddf7ca3e7c01d8e5e13

  • SHA512

    9fd9492529480cee25efb5cf9cb26f726de8cb7eb5f6124176c811916630bc5084e761056b0ac5d8f1a964135bc95c23d502090f23a4490ba4364793d999e0f4

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      234ac64f45ab1e094f06fae8b7d021d0abe9615f87265ddf7ca3e7c01d8e5e13

    • Size

      711KB

    • MD5

      fe7cf6a55fb66ee829febf37f93930f3

    • SHA1

      c3c12335f83b3d1068f9c5a01c536039b8cdc646

    • SHA256

      234ac64f45ab1e094f06fae8b7d021d0abe9615f87265ddf7ca3e7c01d8e5e13

    • SHA512

      9fd9492529480cee25efb5cf9cb26f726de8cb7eb5f6124176c811916630bc5084e761056b0ac5d8f1a964135bc95c23d502090f23a4490ba4364793d999e0f4

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks