Overview

overview

10

Static

static

7a13bd65ef...f0.exe

windows7_x64

10

7a13bd65ef...f0.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a13bd65ef7bc847300a6a516f45110b91070dae3adbcd7f33a28127248c11f0

  • Size

    1.9MB

  • Sample

    210513-87t8danwln

  • MD5

    432764bab736b9ae4d7f37e627b57b0d

  • SHA1

    74697d0419728992d47b918aaf300995496f756b

  • SHA256

    7a13bd65ef7bc847300a6a516f45110b91070dae3adbcd7f33a28127248c11f0

  • SHA512

    3689d7905ee1045e7599cd59b7f50dab0d7e36ef3e5121d2ae3e00c838224bebb599ad080e24ed16907fb7b814f4513a51e3d558bfcac7cb6fd605f4cee5df93

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      7a13bd65ef7bc847300a6a516f45110b91070dae3adbcd7f33a28127248c11f0

    • Size

      1.9MB

    • MD5

      432764bab736b9ae4d7f37e627b57b0d

    • SHA1

      74697d0419728992d47b918aaf300995496f756b

    • SHA256

      7a13bd65ef7bc847300a6a516f45110b91070dae3adbcd7f33a28127248c11f0

    • SHA512

      3689d7905ee1045e7599cd59b7f50dab0d7e36ef3e5121d2ae3e00c838224bebb599ad080e24ed16907fb7b814f4513a51e3d558bfcac7cb6fd605f4cee5df93

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks