Overview

overview

10

Static

static

10

cc91fb7ca0...9d.exe

windows7-x64

10

cc91fb7ca0...9d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc91fb7ca0aae6f73c4dd674fac9f29d

  • Size

    2.8MB

  • Sample

    240315-3v4c3see5s

  • MD5

    cc91fb7ca0aae6f73c4dd674fac9f29d

  • SHA1

    678de19a28874e4d86724e6e3e6c65c61264dbd8

  • SHA256

    f86e7291e33f610ea6806851806c91530b212ccc57c5e17fcbe44fb7cb608571

  • SHA512

    6a982ebc17b7f6c045185875274e18a1d2414e9207c6187d8b5234638d3ba0581ae59f2ea8d2fd30182b7a97a316ac6591ceff17e8b62c3a98909630ce9628e9

  • SSDEEP

    49152:LY3buzMY0IY3buzMW0IY3buzMr0IY3buzMU0:LY3EY3mY3DY3

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      cc91fb7ca0aae6f73c4dd674fac9f29d

    • Size

      2.8MB

    • MD5

      cc91fb7ca0aae6f73c4dd674fac9f29d

    • SHA1

      678de19a28874e4d86724e6e3e6c65c61264dbd8

    • SHA256

      f86e7291e33f610ea6806851806c91530b212ccc57c5e17fcbe44fb7cb608571

    • SHA512

      6a982ebc17b7f6c045185875274e18a1d2414e9207c6187d8b5234638d3ba0581ae59f2ea8d2fd30182b7a97a316ac6591ceff17e8b62c3a98909630ce9628e9

    • SSDEEP

      49152:LY3buzMY0IY3buzMW0IY3buzMr0IY3buzMU0:LY3EY3mY3DY3

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks