Overview

overview

10

Static

static

c8483a8cf7...4e.exe

windows7_x64

10

c8483a8cf7...4e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8483a8cf7f7ffdf949a91dff58716d1a39d5f1488d8a9d004ba66df00277c4e

  • Size

    763KB

  • Sample

    210513-p1zqwb98l6

  • MD5

    bd36f91fe119d280786a82aaca03a587

  • SHA1

    1ded7f789ab95915569de4994bafd23e5c68e213

  • SHA256

    c8483a8cf7f7ffdf949a91dff58716d1a39d5f1488d8a9d004ba66df00277c4e

  • SHA512

    7dd9f9a1a8da8bd7ea235afdc06f9c5e7719af3760e4aa654062a5d24e1849c5331e8e0284ffd103b1eca9b2442400c815fcc91aa5f8e9343807d1a5c036843a

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      c8483a8cf7f7ffdf949a91dff58716d1a39d5f1488d8a9d004ba66df00277c4e

    • Size

      763KB

    • MD5

      bd36f91fe119d280786a82aaca03a587

    • SHA1

      1ded7f789ab95915569de4994bafd23e5c68e213

    • SHA256

      c8483a8cf7f7ffdf949a91dff58716d1a39d5f1488d8a9d004ba66df00277c4e

    • SHA512

      7dd9f9a1a8da8bd7ea235afdc06f9c5e7719af3760e4aa654062a5d24e1849c5331e8e0284ffd103b1eca9b2442400c815fcc91aa5f8e9343807d1a5c036843a

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks