Overview

overview

10

Static

static

10

fb07296696...JC.exe

windows7-x64

10

fb07296696...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb07296696475edb8d777947ca61734a_JC.exe

  • Size

    711KB

  • Sample

    230926-v7jkfadf22

  • MD5

    fb07296696475edb8d777947ca61734a

  • SHA1

    f32d470a297d20bb16453e1feb3c9c52791dc80f

  • SHA256

    dfd2ffc13ec0558e90566399111e3146909e74dceeef27abf05e6845ada7b0cf

  • SHA512

    8d3cdd6f82e5400e917aee82aaaca0061118bf9360b72a93d37cc8b5fb736e25934acaf64ca9130759263a5121df5b8cf5fa57cce4c704b6bc531fced1a24449

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOnHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZHiE6EhE

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      fb07296696475edb8d777947ca61734a_JC.exe

    • Size

      711KB

    • MD5

      fb07296696475edb8d777947ca61734a

    • SHA1

      f32d470a297d20bb16453e1feb3c9c52791dc80f

    • SHA256

      dfd2ffc13ec0558e90566399111e3146909e74dceeef27abf05e6845ada7b0cf

    • SHA512

      8d3cdd6f82e5400e917aee82aaaca0061118bf9360b72a93d37cc8b5fb736e25934acaf64ca9130759263a5121df5b8cf5fa57cce4c704b6bc531fced1a24449

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOnHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZHiE6EhE

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks