Overview

overview

10

Static

static

5a022fe808...cf.exe

windows7_x64

10

5a022fe808...cf.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a022fe8083022077613428a95fc31ed0b2dd31f62d19f1bee8e3232d0d1dccf

  • Size

    763KB

  • Sample

    210515-cddradyz9j

  • MD5

    b4a87eeff610cd3dd8227e115ca9f72f

  • SHA1

    c9745311b84ef579399b6cbfecfc4c521f85ebea

  • SHA256

    5a022fe8083022077613428a95fc31ed0b2dd31f62d19f1bee8e3232d0d1dccf

  • SHA512

    d98c0ef7a86f02354f456a4039f4ef0259278c7756fb47503f134ab165cd93819f310d6d71e055042f4420d569d20a74cfc18605b1ea35380ff84e0ac94936e4

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      5a022fe8083022077613428a95fc31ed0b2dd31f62d19f1bee8e3232d0d1dccf

    • Size

      763KB

    • MD5

      b4a87eeff610cd3dd8227e115ca9f72f

    • SHA1

      c9745311b84ef579399b6cbfecfc4c521f85ebea

    • SHA256

      5a022fe8083022077613428a95fc31ed0b2dd31f62d19f1bee8e3232d0d1dccf

    • SHA512

      d98c0ef7a86f02354f456a4039f4ef0259278c7756fb47503f134ab165cd93819f310d6d71e055042f4420d569d20a74cfc18605b1ea35380ff84e0ac94936e4

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks