Overview

overview

10

Static

static

10

a555df124c...c6.exe

windows7_x64

10

a555df124c...c6.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a555df124c257b1e1972cf1f51c178c910c6f2d49b0b9263f7a8113ce2db5ac6

  • Size

    2.8MB

  • Sample

    220708-a1yesscgc8

  • MD5

    42e70d2adc6ee46c4766ffd60e680754

  • SHA1

    ddbc084f2a661fa7c5e32d75dfd784265fcbeb4a

  • SHA256

    a555df124c257b1e1972cf1f51c178c910c6f2d49b0b9263f7a8113ce2db5ac6

  • SHA512

    3030c51afdec55508c47753df5e4f7815ff040cb781c7464bda96a95c1313a751745e14b20db20148f93d5b2915fa1ff46eec382f8aa49eb3d099747820bbdfa

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      a555df124c257b1e1972cf1f51c178c910c6f2d49b0b9263f7a8113ce2db5ac6

    • Size

      2.8MB

    • MD5

      42e70d2adc6ee46c4766ffd60e680754

    • SHA1

      ddbc084f2a661fa7c5e32d75dfd784265fcbeb4a

    • SHA256

      a555df124c257b1e1972cf1f51c178c910c6f2d49b0b9263f7a8113ce2db5ac6

    • SHA512

      3030c51afdec55508c47753df5e4f7815ff040cb781c7464bda96a95c1313a751745e14b20db20148f93d5b2915fa1ff46eec382f8aa49eb3d099747820bbdfa

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks