Overview

overview

10

Static

static

10

3a0e80c0a7...fe.exe

windows7-x64

10

3a0e80c0a7...fe.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0e80c0a74abe95f63d8983efbae8fe

  • Size

    3.4MB

  • Sample

    231231-rzhrdsaaf2

  • MD5

    3a0e80c0a74abe95f63d8983efbae8fe

  • SHA1

    c0b6d39d7ef67a8e36847d222a827266c6bf3000

  • SHA256

    5363e5fe4d491432bceec8685713e85519371e1605a2808fddf3763944fd0e88

  • SHA512

    ddc3b8569f7c9a721f4aa5bee554ae910ff16c21f5bf1e813431bc7ea744a91ae6516b072837b929e93bf091b55a4376190be01b02002f995a591d38ce50c07a

  • SSDEEP

    49152:67N1ahCQ0V7N1ahCm0V7N1ahCW0V7N1ahCd0V7N1ahCP:67d7z7j7Q7P

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      3a0e80c0a74abe95f63d8983efbae8fe

    • Size

      3.4MB

    • MD5

      3a0e80c0a74abe95f63d8983efbae8fe

    • SHA1

      c0b6d39d7ef67a8e36847d222a827266c6bf3000

    • SHA256

      5363e5fe4d491432bceec8685713e85519371e1605a2808fddf3763944fd0e88

    • SHA512

      ddc3b8569f7c9a721f4aa5bee554ae910ff16c21f5bf1e813431bc7ea744a91ae6516b072837b929e93bf091b55a4376190be01b02002f995a591d38ce50c07a

    • SSDEEP

      49152:67N1ahCQ0V7N1ahCm0V7N1ahCW0V7N1ahCd0V7N1ahCP:67d7z7j7Q7P

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks