Overview

overview

10

Static

static

10

43f2056b66...2b.exe

windows7_x64

43f2056b66...2b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43f2056b66ad2c3cefb88d250e9a0a464821a791a3987cfd4b18ef0fedbbd02b

  • Size

    2.1MB

  • Sample

    220707-z5j6eacdak

  • MD5

    719edc19024c255adcf54f0439596e6b

  • SHA1

    0b5c553de4ceb1ecd2152a5baca1be6f44b0b724

  • SHA256

    43f2056b66ad2c3cefb88d250e9a0a464821a791a3987cfd4b18ef0fedbbd02b

  • SHA512

    2cd9731b13644efada38850eed330038557b13d065c8ee295f8d35d11db411b7070067fe329b58a6a2e7e4e29f5cd898cdece8fae377aa32e73e4fc2a715e048

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      43f2056b66ad2c3cefb88d250e9a0a464821a791a3987cfd4b18ef0fedbbd02b

    • Size

      2.1MB

    • MD5

      719edc19024c255adcf54f0439596e6b

    • SHA1

      0b5c553de4ceb1ecd2152a5baca1be6f44b0b724

    • SHA256

      43f2056b66ad2c3cefb88d250e9a0a464821a791a3987cfd4b18ef0fedbbd02b

    • SHA512

      2cd9731b13644efada38850eed330038557b13d065c8ee295f8d35d11db411b7070067fe329b58a6a2e7e4e29f5cd898cdece8fae377aa32e73e4fc2a715e048

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks