Overview

overview

10

Static

static

10

bd03b805d0...96.exe

windows7_x64

10

bd03b805d0...96.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd03b805d033d0ab361abfb5efa88347b4205296ebbefe617dbd9a5b70de9796

  • Size

    711KB

  • Sample

    220615-c34eyadbg8

  • MD5

    2b5220e6ad3d1f058d45061aaf251dc3

  • SHA1

    00c53b822c8111f2302c203d837d2f29ecf3b969

  • SHA256

    bd03b805d033d0ab361abfb5efa88347b4205296ebbefe617dbd9a5b70de9796

  • SHA512

    46556be1264128ab2acfcd0fdc363c11cc2fd98db30b6fb2b3b269df7f425727df99aedc3ae7e2d9b27aacd577ee2a1668ad0b9186fc992bbf436fe7b0d04fd1

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      bd03b805d033d0ab361abfb5efa88347b4205296ebbefe617dbd9a5b70de9796

    • Size

      711KB

    • MD5

      2b5220e6ad3d1f058d45061aaf251dc3

    • SHA1

      00c53b822c8111f2302c203d837d2f29ecf3b969

    • SHA256

      bd03b805d033d0ab361abfb5efa88347b4205296ebbefe617dbd9a5b70de9796

    • SHA512

      46556be1264128ab2acfcd0fdc363c11cc2fd98db30b6fb2b3b269df7f425727df99aedc3ae7e2d9b27aacd577ee2a1668ad0b9186fc992bbf436fe7b0d04fd1

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks