Overview

overview

10

Static

static

10

29c3702eab...b5.exe

windows7_x64

10

29c3702eab...b5.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29c3702eab206de638f199982aad8ae2797bd0d69d89e9aac5452eef0ced51b5

  • Size

    2.1MB

  • Sample

    220615-qh2bqsbad7

  • MD5

    e0a6f5d6aa1d54d806907d7f582e5908

  • SHA1

    029b4d4657e5f2aaa8a9c470d9b653f25ba59ff3

  • SHA256

    29c3702eab206de638f199982aad8ae2797bd0d69d89e9aac5452eef0ced51b5

  • SHA512

    8a4b5ba26f5130b0df3fb9839cb837c3fe07f2212182b4c496f8d120b0c6f6aba66b050a0429f24891ab552464851b9204587a91875e2a4442b2f41cc898dfb7

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      29c3702eab206de638f199982aad8ae2797bd0d69d89e9aac5452eef0ced51b5

    • Size

      2.1MB

    • MD5

      e0a6f5d6aa1d54d806907d7f582e5908

    • SHA1

      029b4d4657e5f2aaa8a9c470d9b653f25ba59ff3

    • SHA256

      29c3702eab206de638f199982aad8ae2797bd0d69d89e9aac5452eef0ced51b5

    • SHA512

      8a4b5ba26f5130b0df3fb9839cb837c3fe07f2212182b4c496f8d120b0c6f6aba66b050a0429f24891ab552464851b9204587a91875e2a4442b2f41cc898dfb7

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks