Overview

overview

10

Static

static

8

dff227722f...92.exe

windows7_x64

10

dff227722f...92.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dff227722f36f8fc92f96450f93b84244c33e121f13f1eb7eaf7c21ddedf5992

  • Size

    384KB

  • Sample

    210515-51c26adpan

  • MD5

    b5922c94c867f3bab84bdb8db2a2c255

  • SHA1

    cd572d0ab72dc270dc30cd188c56f40dec4cb24f

  • SHA256

    dff227722f36f8fc92f96450f93b84244c33e121f13f1eb7eaf7c21ddedf5992

  • SHA512

    8e4fdf9710eece062984e719842325e0b0e21d151a64894511acfa0611b8622b96b904e00c1f276944310b483ea0c7a7f267176141dac7d673e42cdacf6e09eb

Score
10/10
vobfuspersistenceupxworm

Malware Config

Targets

    • Target

      dff227722f36f8fc92f96450f93b84244c33e121f13f1eb7eaf7c21ddedf5992

    • Size

      384KB

    • MD5

      b5922c94c867f3bab84bdb8db2a2c255

    • SHA1

      cd572d0ab72dc270dc30cd188c56f40dec4cb24f

    • SHA256

      dff227722f36f8fc92f96450f93b84244c33e121f13f1eb7eaf7c21ddedf5992

    • SHA512

      8e4fdf9710eece062984e719842325e0b0e21d151a64894511acfa0611b8622b96b904e00c1f276944310b483ea0c7a7f267176141dac7d673e42cdacf6e09eb

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks