Overview

overview

10

Static

static

8

fc7ecc4ca8...02.exe

windows7_x64

10

fc7ecc4ca8...02.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc7ecc4ca805d951fd9c897ff3bd6980371cc3c1b1d58e5a322ae8d06cd20c02

  • Size

    221KB

  • Sample

    210513-xtlwcbl41j

  • MD5

    5c26355b68dcd948ba60828c03641713

  • SHA1

    f9b7891c88d6c4c3fe3a48a84a46419c24a5c5bb

  • SHA256

    fc7ecc4ca805d951fd9c897ff3bd6980371cc3c1b1d58e5a322ae8d06cd20c02

  • SHA512

    d16a11e32731927e3556689462a0c69719faf17c169cbb45b77f789578a0f13c80334ece719219e30ad7f1e9b2bbeabfdb35f1179fcebfb9159d1c5b3898051c

Score
10/10
vobfuspersistenceupxworm

Malware Config

Targets

    • Target

      fc7ecc4ca805d951fd9c897ff3bd6980371cc3c1b1d58e5a322ae8d06cd20c02

    • Size

      221KB

    • MD5

      5c26355b68dcd948ba60828c03641713

    • SHA1

      f9b7891c88d6c4c3fe3a48a84a46419c24a5c5bb

    • SHA256

      fc7ecc4ca805d951fd9c897ff3bd6980371cc3c1b1d58e5a322ae8d06cd20c02

    • SHA512

      d16a11e32731927e3556689462a0c69719faf17c169cbb45b77f789578a0f13c80334ece719219e30ad7f1e9b2bbeabfdb35f1179fcebfb9159d1c5b3898051c

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks