Overview

overview

10

Static

static

cb88a2cf6a...16.exe

windows7_x64

10

cb88a2cf6a...16.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb88a2cf6ad395bd51005f891c82709aeb3100db92dc4bf7e6576c90a0759316

  • Size

    320KB

  • Sample

    220326-2f2p9sabd6

  • MD5

    00da2a77a2b7779a7d7bc37deeb2f259

  • SHA1

    f4f694a419bee5e76e8ea0b2fce71f76b09826b2

  • SHA256

    cb88a2cf6ad395bd51005f891c82709aeb3100db92dc4bf7e6576c90a0759316

  • SHA512

    2e9d995f374f8e57afaf7f3c626053484dcdb86aa65a85443a66aa88abd9329c5853462c005226e1a8ae79e905b8af31461713942b7a870208216f3bb264651f

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      cb88a2cf6ad395bd51005f891c82709aeb3100db92dc4bf7e6576c90a0759316

    • Size

      320KB

    • MD5

      00da2a77a2b7779a7d7bc37deeb2f259

    • SHA1

      f4f694a419bee5e76e8ea0b2fce71f76b09826b2

    • SHA256

      cb88a2cf6ad395bd51005f891c82709aeb3100db92dc4bf7e6576c90a0759316

    • SHA512

      2e9d995f374f8e57afaf7f3c626053484dcdb86aa65a85443a66aa88abd9329c5853462c005226e1a8ae79e905b8af31461713942b7a870208216f3bb264651f

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks