Overview

overview

10

Static

static

8

ee266ee99f...8f.exe

windows7_x64

10

ee266ee99f...8f.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee266ee99f39d6f646086d51e30ef757542b5bd60a4625cb023f964a3bf4368f

  • Size

    221KB

  • Sample

    210513-dv3qkwhnwn

  • MD5

    1e0c23020c0884d1d8a68c1f73fdb16f

  • SHA1

    f66460b056611dce52cc404fa3e96bbc856b2551

  • SHA256

    ee266ee99f39d6f646086d51e30ef757542b5bd60a4625cb023f964a3bf4368f

  • SHA512

    d7c976e1b0d29c3bbc5289bc647df34dd0e3b09e5262ddac30df1b310a6bc278253f47df0a0760092f777d8b4bb497eae2e5b182ee70323df70b95d318bd17f4

Score
10/10
vobfuspersistenceupxworm

Malware Config

Targets

    • Target

      ee266ee99f39d6f646086d51e30ef757542b5bd60a4625cb023f964a3bf4368f

    • Size

      221KB

    • MD5

      1e0c23020c0884d1d8a68c1f73fdb16f

    • SHA1

      f66460b056611dce52cc404fa3e96bbc856b2551

    • SHA256

      ee266ee99f39d6f646086d51e30ef757542b5bd60a4625cb023f964a3bf4368f

    • SHA512

      d7c976e1b0d29c3bbc5289bc647df34dd0e3b09e5262ddac30df1b310a6bc278253f47df0a0760092f777d8b4bb497eae2e5b182ee70323df70b95d318bd17f4

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks