Overview

overview

10

Static

static

10

2dc7bd7d92...JC.exe

windows7-x64

10

2dc7bd7d92...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2dc7bd7d9226e036c6975ae3e5d74946_JC.exe

  • Size

    711KB

  • Sample

    231012-cdsxxahc6v

  • MD5

    2dc7bd7d9226e036c6975ae3e5d74946

  • SHA1

    cac493c21435863653d4459d4949ddfa8f360947

  • SHA256

    804b088ee714bf7a63b004f7ec2260bd1956fa64fcb04481d2aece4cb88c2404

  • SHA512

    ec843f6d607fa368f6da9088d0fe3cbc32299403b4319006f9dc3369b1501b463d6594a27c596a208e27ac5b6576088da303b48db52192b08c5edd8527400042

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOUHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZgiE6EhE

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      2dc7bd7d9226e036c6975ae3e5d74946_JC.exe

    • Size

      711KB

    • MD5

      2dc7bd7d9226e036c6975ae3e5d74946

    • SHA1

      cac493c21435863653d4459d4949ddfa8f360947

    • SHA256

      804b088ee714bf7a63b004f7ec2260bd1956fa64fcb04481d2aece4cb88c2404

    • SHA512

      ec843f6d607fa368f6da9088d0fe3cbc32299403b4319006f9dc3369b1501b463d6594a27c596a208e27ac5b6576088da303b48db52192b08c5edd8527400042

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOUHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZgiE6EhE

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks