Overview

overview

10

Static

static

10

3eeac72f40...65.exe

windows7_x64

10

3eeac72f40...65.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3eeac72f40529cb690e7980e2e5c7e99b0e299926768e7623094836698aff565

  • Size

    711KB

  • Sample

    220701-exmw4sdee6

  • MD5

    b321f7acb1dc3d38381b0ddbde39509b

  • SHA1

    dc351d62e99586f787833f11958ec2164a4485d6

  • SHA256

    3eeac72f40529cb690e7980e2e5c7e99b0e299926768e7623094836698aff565

  • SHA512

    13a09028008553d66c25928fd795f6288f79c928e10d4f6107db979e40bc558351e043dcf0991f6a6fb34417e39652362f49929011dc3b1e9e5f571b12825cdd

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3eeac72f40529cb690e7980e2e5c7e99b0e299926768e7623094836698aff565

    • Size

      711KB

    • MD5

      b321f7acb1dc3d38381b0ddbde39509b

    • SHA1

      dc351d62e99586f787833f11958ec2164a4485d6

    • SHA256

      3eeac72f40529cb690e7980e2e5c7e99b0e299926768e7623094836698aff565

    • SHA512

      13a09028008553d66c25928fd795f6288f79c928e10d4f6107db979e40bc558351e043dcf0991f6a6fb34417e39652362f49929011dc3b1e9e5f571b12825cdd

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks