Analysis
- max time kernel
141s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
03/07/2024, 23:43
General
- Target 1c7dfb4571b090510888a0ab4b3ca62b3d3ee13ddfbdc382e594254776bfb386.exe
- Size 711KB
- Sample240703-3qj4mstgla
- SHA256 1c7dfb4571b090510888a0ab4b3ca62b3d3ee13ddfbdc382e594254776bfb386
Score
10/10
Malware Config
Signatures
- FakeAV, RogueAntivirus
FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.
- FakeAV payload 1 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
- Drops file in System32 directory 2 IoCs
- Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c7dfb4571b090510888a0ab4b3ca62b3d3ee13ddfbdc382e594254776bfb386.exe"C:\Users\Admin\AppData\Local\Temp\1c7dfb4571b090510888a0ab4b3ca62b3d3ee13ddfbdc382e594254776bfb386.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2964-0-0x0000000001EC0000-0x0000000001EC1000-memory.dmp
memory/2964-5-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/2964-7-0x0000000001EC0000-0x0000000001EC1000-memory.dmp