Overview

overview

10

Static

static

10

515038f202...32.exe

windows7-x64

10

515038f202...32.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    515038f202589c7d6700f5ec85ca624235c2768a388ce7655d3d52acf5d02732

  • Size

    711KB

  • Sample

    220718-tsm4mshea9

  • MD5

    e8228c962f8600efd7709285766b0815

  • SHA1

    000179d450cd10b81d4a9e400fb8b63eb12b130b

  • SHA256

    515038f202589c7d6700f5ec85ca624235c2768a388ce7655d3d52acf5d02732

  • SHA512

    7a35367090158f047a433655d4522424a7422d50075b16ff09b5f856b91020560d5240f7329403a9d33991db233b026a80ccf2581770bfee154120ea617f57ff

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      515038f202589c7d6700f5ec85ca624235c2768a388ce7655d3d52acf5d02732

    • Size

      711KB

    • MD5

      e8228c962f8600efd7709285766b0815

    • SHA1

      000179d450cd10b81d4a9e400fb8b63eb12b130b

    • SHA256

      515038f202589c7d6700f5ec85ca624235c2768a388ce7655d3d52acf5d02732

    • SHA512

      7a35367090158f047a433655d4522424a7422d50075b16ff09b5f856b91020560d5240f7329403a9d33991db233b026a80ccf2581770bfee154120ea617f57ff

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks