Overview

overview

10

Static

static

10

1.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.exe

  • Size

    711KB

  • Sample

    220730-p3qkasbhal

  • MD5

    0de1c2cf69738f36198dd30ce3ac5b03

  • SHA1

    762a0b3b03ae493d051578742ae7a033de23f817

  • SHA256

    b2242bb73bfaed60cea219e356f486d9af8c3fc5102cd19453bd497d82bcca83

  • SHA512

    fae88854a8ba24c1b322df2f3fbc65b0c569978e5887d19557029ffcb83004d68f4e9158f226e478f92006d82430e6db9c8e324d7c0ca8b276a2d73460e12dfe

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      1.exe

    • Size

      711KB

    • MD5

      0de1c2cf69738f36198dd30ce3ac5b03

    • SHA1

      762a0b3b03ae493d051578742ae7a033de23f817

    • SHA256

      b2242bb73bfaed60cea219e356f486d9af8c3fc5102cd19453bd497d82bcca83

    • SHA512

      fae88854a8ba24c1b322df2f3fbc65b0c569978e5887d19557029ffcb83004d68f4e9158f226e478f92006d82430e6db9c8e324d7c0ca8b276a2d73460e12dfe

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks