Overview

overview

10

Static

static

10

8e33562dac...eN.exe

windows7-x64

10

8e33562dac...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e33562dacebafb2130471d06a40413526fb07a17d9c33380914efcbac3cebbeN.exe

  • Size

    1.6MB

  • Sample

    241225-v86rcszqhx

  • MD5

    1de691b38670c256d20a34cc77a98c70

  • SHA1

    3bd82957055d3d4173d910540733abebddb9904f

  • SHA256

    8e33562dacebafb2130471d06a40413526fb07a17d9c33380914efcbac3cebbe

  • SHA512

    0295bd05b68e34a011e40f891f98da3d46567f30d997030513c19a0a6d78b44737bc72755486008bf9b903188941d65c24b50694a10d0b5892410faa30819cd1

  • SSDEEP

    24576:hxY3NtGUmJr+4Obxd+tPZSZPiE6EhE9xY3NtGUmJr+4Obxd+tPZSZRiE6EhE7:LY3buzMM0IY3buzMy0E

Score
10/10
fakeavdiscoveryfakeavpersistencespyware

Malware Config

Targets

    • Target

      8e33562dacebafb2130471d06a40413526fb07a17d9c33380914efcbac3cebbeN.exe

    • Size

      1.6MB

    • MD5

      1de691b38670c256d20a34cc77a98c70

    • SHA1

      3bd82957055d3d4173d910540733abebddb9904f

    • SHA256

      8e33562dacebafb2130471d06a40413526fb07a17d9c33380914efcbac3cebbe

    • SHA512

      0295bd05b68e34a011e40f891f98da3d46567f30d997030513c19a0a6d78b44737bc72755486008bf9b903188941d65c24b50694a10d0b5892410faa30819cd1

    • SSDEEP

      24576:hxY3NtGUmJr+4Obxd+tPZSZPiE6EhE9xY3NtGUmJr+4Obxd+tPZSZRiE6EhE7:LY3buzMM0IY3buzMy0E

    Score
    10/10
    fakeavdiscoveryfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Fakeav family

      fakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks