Overview

overview

10

Static

static

10

595b1067a5...f7.exe

windows7-x64

10

595b1067a5...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    595b1067a58636adb4dd389f619d7e338ec909485509ce6cc5aff1b834b117f7

  • Size

    5.6MB

  • Sample

    220724-es9kbaehcr

  • MD5

    9495e20971b3977f703f407bfffbf363

  • SHA1

    2b21c6a5892854c478bffd08dd85f9416e6d8719

  • SHA256

    595b1067a58636adb4dd389f619d7e338ec909485509ce6cc5aff1b834b117f7

  • SHA512

    a172c95186c0c56b7db282b72287619626151a9bb22892de129b59069e44d32fafe581eca6bcdd128d840efd147dcc956e4f7dce1b5e0192e1ee63d352f8dff9

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      595b1067a58636adb4dd389f619d7e338ec909485509ce6cc5aff1b834b117f7

    • Size

      5.6MB

    • MD5

      9495e20971b3977f703f407bfffbf363

    • SHA1

      2b21c6a5892854c478bffd08dd85f9416e6d8719

    • SHA256

      595b1067a58636adb4dd389f619d7e338ec909485509ce6cc5aff1b834b117f7

    • SHA512

      a172c95186c0c56b7db282b72287619626151a9bb22892de129b59069e44d32fafe581eca6bcdd128d840efd147dcc956e4f7dce1b5e0192e1ee63d352f8dff9

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks