Overview

overview

10

Static

static

746530f90a...c5.exe

windows7_x64

10

746530f90a...c5.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    746530f90ad74f126ecac5610783f2373f77c0c732db9b1790406df9dc72b8c5

  • Size

    572KB

  • Sample

    210513-ahx9xkmxs2

  • MD5

    c8d8744ebf695cd4ce71bda0e127cee9

  • SHA1

    d87362b490c25ffd3a13d0f5f21eb9d77498ebec

  • SHA256

    746530f90ad74f126ecac5610783f2373f77c0c732db9b1790406df9dc72b8c5

  • SHA512

    554d2b9968d496dce1097dac65d2511ab2ba5c9775fdb7fcdadcaea126d9496c2c38b78bbb2b46857ab65d45f005fda0ea4fb05a69b9143a19ebdb6b7e4a3b52

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      746530f90ad74f126ecac5610783f2373f77c0c732db9b1790406df9dc72b8c5

    • Size

      572KB

    • MD5

      c8d8744ebf695cd4ce71bda0e127cee9

    • SHA1

      d87362b490c25ffd3a13d0f5f21eb9d77498ebec

    • SHA256

      746530f90ad74f126ecac5610783f2373f77c0c732db9b1790406df9dc72b8c5

    • SHA512

      554d2b9968d496dce1097dac65d2511ab2ba5c9775fdb7fcdadcaea126d9496c2c38b78bbb2b46857ab65d45f005fda0ea4fb05a69b9143a19ebdb6b7e4a3b52

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks