Overview

overview

10

Static

static

10

3a50669ec6...c3.exe

windows7_x64

10

3a50669ec6...c3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a50669ec62f28c3f9b50f73082a17d1c7d18384d2e74653f027d1c1fb7586c3

  • Size

    711KB

  • Sample

    220625-fagl9aeecq

  • MD5

    3dc9720dd73f8fc47ca6c51d4a2ffad8

  • SHA1

    8d926297ad619d01d2e34876d27de55b096000d8

  • SHA256

    3a50669ec62f28c3f9b50f73082a17d1c7d18384d2e74653f027d1c1fb7586c3

  • SHA512

    6bf801f14898d0a4a987e78d13ccf6f29233b54b783882ddbe61ef54de8701757f7d0f79b12d1fe25c727e73582be5b1b00b2bb737882b3e4a008142b7cfe587

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3a50669ec62f28c3f9b50f73082a17d1c7d18384d2e74653f027d1c1fb7586c3

    • Size

      711KB

    • MD5

      3dc9720dd73f8fc47ca6c51d4a2ffad8

    • SHA1

      8d926297ad619d01d2e34876d27de55b096000d8

    • SHA256

      3a50669ec62f28c3f9b50f73082a17d1c7d18384d2e74653f027d1c1fb7586c3

    • SHA512

      6bf801f14898d0a4a987e78d13ccf6f29233b54b783882ddbe61ef54de8701757f7d0f79b12d1fe25c727e73582be5b1b00b2bb737882b3e4a008142b7cfe587

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks