Overview

overview

10

Static

static

10

73b9fec19a...77.exe

windows7-x64

10

73b9fec19a...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73b9fec19a81ce00c7804a3e0daed45df0d716e4544a1c6b508221bf4b511977

  • Size

    711KB

  • Sample

    220730-yy349sfdaq

  • MD5

    61c0ee56ae6964c709f51e895acfa8bc

  • SHA1

    9f8d6ca9193270684637802625efb051335365f6

  • SHA256

    73b9fec19a81ce00c7804a3e0daed45df0d716e4544a1c6b508221bf4b511977

  • SHA512

    0d0fd90cd3c914099198c6dba942eab7ca7139badfdb71c4adb82c775d5bd249faac251b9809796b78642b86e8f04a6ae4f6d153ff64a763fa5002a0cee881e5

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      73b9fec19a81ce00c7804a3e0daed45df0d716e4544a1c6b508221bf4b511977

    • Size

      711KB

    • MD5

      61c0ee56ae6964c709f51e895acfa8bc

    • SHA1

      9f8d6ca9193270684637802625efb051335365f6

    • SHA256

      73b9fec19a81ce00c7804a3e0daed45df0d716e4544a1c6b508221bf4b511977

    • SHA512

      0d0fd90cd3c914099198c6dba942eab7ca7139badfdb71c4adb82c775d5bd249faac251b9809796b78642b86e8f04a6ae4f6d153ff64a763fa5002a0cee881e5

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks