Overview

overview

10

Static

static

10

59b603967a...ac.exe

windows7-x64

10

59b603967a...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59b603967ade63ec89f5c7ff104eeddfa6fb7061277807c3a94aa63bc5c41cac

  • Size

    812KB

  • Sample

    250123-a6akxsvmdj

  • MD5

    6e80e07bd9dc6c19ae0b7adde51a6e59

  • SHA1

    1dea8a77b78d779096740a6e91c6052aa3b8127d

  • SHA256

    59b603967ade63ec89f5c7ff104eeddfa6fb7061277807c3a94aa63bc5c41cac

  • SHA512

    d9abc1e8f9c28ecbeccc74dc7b44d49040f4f5d6f97f063d297f2c3f4ef4ac52e9d6e65d62d5ee50a9c414f477ce2beb657fd09ec9ddb7d956723b7e1b02aa09

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JONHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZpiE6EhE

Score
10/10
fakeavdiscoveryfakeavpersistencespyware

Malware Config

Targets

    • Target

      59b603967ade63ec89f5c7ff104eeddfa6fb7061277807c3a94aa63bc5c41cac

    • Size

      812KB

    • MD5

      6e80e07bd9dc6c19ae0b7adde51a6e59

    • SHA1

      1dea8a77b78d779096740a6e91c6052aa3b8127d

    • SHA256

      59b603967ade63ec89f5c7ff104eeddfa6fb7061277807c3a94aa63bc5c41cac

    • SHA512

      d9abc1e8f9c28ecbeccc74dc7b44d49040f4f5d6f97f063d297f2c3f4ef4ac52e9d6e65d62d5ee50a9c414f477ce2beb657fd09ec9ddb7d956723b7e1b02aa09

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JONHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZpiE6EhE

    Score
    10/10
    fakeavdiscoveryfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Fakeav family

      fakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks