Overview

overview

10

Static

static

4461150e72...0a.exe

windows7_x64

10

4461150e72...0a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4461150e72dcb0de975ff5aa2af310017dd72fb18d545a377645661b0c865a0a

  • Size

    1.9MB

  • Sample

    220326-mbbwqabea3

  • MD5

    1085166377e60bf54cad5c7a5d36aea0

  • SHA1

    53d3180aa4092c32fd45a0648e63e1a628b23cd6

  • SHA256

    4461150e72dcb0de975ff5aa2af310017dd72fb18d545a377645661b0c865a0a

  • SHA512

    8ac5c11d3d8fd26968fc447ed7f0fc69e93ffc57ece1082efb6775043726ef991e01daac908eb9a375a03662055b7742407bbb42c18672d1b7378b3795004065

Score
10/10
vobfuspersistenceworm

Malware Config

Targets

    • Target

      4461150e72dcb0de975ff5aa2af310017dd72fb18d545a377645661b0c865a0a

    • Size

      1.9MB

    • MD5

      1085166377e60bf54cad5c7a5d36aea0

    • SHA1

      53d3180aa4092c32fd45a0648e63e1a628b23cd6

    • SHA256

      4461150e72dcb0de975ff5aa2af310017dd72fb18d545a377645661b0c865a0a

    • SHA512

      8ac5c11d3d8fd26968fc447ed7f0fc69e93ffc57ece1082efb6775043726ef991e01daac908eb9a375a03662055b7742407bbb42c18672d1b7378b3795004065

    Score
    10/10
    vobfuspersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks