Overview

overview

10

Static

static

10

59fdccce92...61.exe

windows7-x64

10

59fdccce92...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59fdccce92e15007cf1b7515aa96bfd82af5d4907d350f6694c5179ddacdaa61

  • Size

    1.4MB

  • Sample

    220724-cm1dcabcf5

  • MD5

    c1d1187b4f01156586de6eaa3c5b976b

  • SHA1

    a98d56b013593f3f081e1d2e9c983fc250b4cb62

  • SHA256

    59fdccce92e15007cf1b7515aa96bfd82af5d4907d350f6694c5179ddacdaa61

  • SHA512

    734c9fea5b84469608e0247ab9db207e1a5e43fd69c9f108426321df68f3478e331b7962476a8f19a652ed884b255cc677de524ec3256abf58c0041bd959d54a

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      59fdccce92e15007cf1b7515aa96bfd82af5d4907d350f6694c5179ddacdaa61

    • Size

      1.4MB

    • MD5

      c1d1187b4f01156586de6eaa3c5b976b

    • SHA1

      a98d56b013593f3f081e1d2e9c983fc250b4cb62

    • SHA256

      59fdccce92e15007cf1b7515aa96bfd82af5d4907d350f6694c5179ddacdaa61

    • SHA512

      734c9fea5b84469608e0247ab9db207e1a5e43fd69c9f108426321df68f3478e331b7962476a8f19a652ed884b255cc677de524ec3256abf58c0041bd959d54a

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks