Overview

overview

10

Static

static

8

61bc6ce0bd...14.exe

windows7_x64

10

61bc6ce0bd...14.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61bc6ce0bde4c2f8c55ba136e9637758658fe0f1fde991032b0f40bf2ed0ef14

  • Size

    1.1MB

  • Sample

    210513-1wzt1zsnds

  • MD5

    b9aa8e1ab7fc0bf176c154c928195909

  • SHA1

    abd0c18d07ec0ba8af6da97d9b84e0f8a6b69368

  • SHA256

    61bc6ce0bde4c2f8c55ba136e9637758658fe0f1fde991032b0f40bf2ed0ef14

  • SHA512

    699fc5eb6a8b686802bb36af0d56cbdd0388aafc30925f0099c4bdae48ca5d5e6253456efeb0f697770a6ea8a8a3a3e23f98404990336223664ee2bd074e1f9e

Score
10/10
vobfuspersistenceupxworm

Malware Config

Targets

    • Target

      61bc6ce0bde4c2f8c55ba136e9637758658fe0f1fde991032b0f40bf2ed0ef14

    • Size

      1.1MB

    • MD5

      b9aa8e1ab7fc0bf176c154c928195909

    • SHA1

      abd0c18d07ec0ba8af6da97d9b84e0f8a6b69368

    • SHA256

      61bc6ce0bde4c2f8c55ba136e9637758658fe0f1fde991032b0f40bf2ed0ef14

    • SHA512

      699fc5eb6a8b686802bb36af0d56cbdd0388aafc30925f0099c4bdae48ca5d5e6253456efeb0f697770a6ea8a8a3a3e23f98404990336223664ee2bd074e1f9e

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks