Overview

overview

10

Static

static

2f1cae131b...69.exe

windows7_x64

10

2f1cae131b...69.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f1cae131b133f5e993747f75f629bb828c395aa32fc381fda90c001422aac69

  • Size

    762KB

  • Sample

    210516-f54c1m7dba

  • MD5

    b9705c2cd6ebd2dcf7932b5b7356310a

  • SHA1

    1d38f031b5f4a927440785cd1e41011d30220035

  • SHA256

    2f1cae131b133f5e993747f75f629bb828c395aa32fc381fda90c001422aac69

  • SHA512

    11e6bfc77982395b95e99b100faf8fbda4844f4b7765c4179ca12e9e599a0de1212f944afb733edc535e9797dd4bcd66c943b41d258a724b792ca010781ef46c

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      2f1cae131b133f5e993747f75f629bb828c395aa32fc381fda90c001422aac69

    • Size

      762KB

    • MD5

      b9705c2cd6ebd2dcf7932b5b7356310a

    • SHA1

      1d38f031b5f4a927440785cd1e41011d30220035

    • SHA256

      2f1cae131b133f5e993747f75f629bb828c395aa32fc381fda90c001422aac69

    • SHA512

      11e6bfc77982395b95e99b100faf8fbda4844f4b7765c4179ca12e9e599a0de1212f944afb733edc535e9797dd4bcd66c943b41d258a724b792ca010781ef46c

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks