Overview

overview

10

Static

static

10

b264483365...6b.exe

windows7-x64

10

b264483365...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2644833655b5b7a5a504232ade7dfedc10f6c9d0b877acc12342e57178c996b

  • Size

    711KB

  • Sample

    221205-kh1sbagc2z

  • MD5

    1c7cb87bb518e832736b3e7a4952c5c2

  • SHA1

    3b9dda6e90d5f53e60c3db3d8b148081b81bc20d

  • SHA256

    b2644833655b5b7a5a504232ade7dfedc10f6c9d0b877acc12342e57178c996b

  • SHA512

    909da2941a379c68789976a689ff42b0353d21a6f85ac16f0d7085dc7403e6cae899fbdadb82050e98974000df63c3c11ba443ec2f9178081d4f6e3fb883c8be

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOEHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZwiE6EhE

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      b2644833655b5b7a5a504232ade7dfedc10f6c9d0b877acc12342e57178c996b

    • Size

      711KB

    • MD5

      1c7cb87bb518e832736b3e7a4952c5c2

    • SHA1

      3b9dda6e90d5f53e60c3db3d8b148081b81bc20d

    • SHA256

      b2644833655b5b7a5a504232ade7dfedc10f6c9d0b877acc12342e57178c996b

    • SHA512

      909da2941a379c68789976a689ff42b0353d21a6f85ac16f0d7085dc7403e6cae899fbdadb82050e98974000df63c3c11ba443ec2f9178081d4f6e3fb883c8be

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOEHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZwiE6EhE

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks