Overview

overview

10

Static

static

10

f2ae8502f8...0f.exe

windows7-x64

10

f2ae8502f8...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2ae8502f816891d0457fb2bb0c2935169c93809b82037a5b78ff5b720611b0f

  • Size

    888KB

  • Sample

    221207-jqgtqsbf4v

  • MD5

    e1cd062bde53cec46b4712ea79d5f66b

  • SHA1

    bcd9a55ba1553fd040dc22c782a4b98665c3ebae

  • SHA256

    f2ae8502f816891d0457fb2bb0c2935169c93809b82037a5b78ff5b720611b0f

  • SHA512

    c5722c73344ee5ccaa789c437c3217c339fe5f2a1772c867825adf81abdb34eed96e09c017da126814608c2cae7920eb8a3fe877c36780b7a310d6bc0a26817e

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOTHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZjiE6EhE

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      f2ae8502f816891d0457fb2bb0c2935169c93809b82037a5b78ff5b720611b0f

    • Size

      888KB

    • MD5

      e1cd062bde53cec46b4712ea79d5f66b

    • SHA1

      bcd9a55ba1553fd040dc22c782a4b98665c3ebae

    • SHA256

      f2ae8502f816891d0457fb2bb0c2935169c93809b82037a5b78ff5b720611b0f

    • SHA512

      c5722c73344ee5ccaa789c437c3217c339fe5f2a1772c867825adf81abdb34eed96e09c017da126814608c2cae7920eb8a3fe877c36780b7a310d6bc0a26817e

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOTHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZjiE6EhE

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks