Overview

overview

7

Static

static

7

WormMars.exe

windows7-x64

7

WormMars.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    478ca578b8cd8099bbf19fb9fe4f718f

  • Size

    10KB

  • Sample

    240107-aq3lrsccg3

  • MD5

    478ca578b8cd8099bbf19fb9fe4f718f

  • SHA1

    43bab83ff39e9419211ccbe9b7167132ece1eef6

  • SHA256

    9b198b9520813c0455b11951f524cca495e7978b03386c85393a7f6047051193

  • SHA512

    1f72e60448b1d64c4cd2af14a896f1fbcf6899f3649cbbae953f4514259b6dea39170a12b0979b0397b03d6bf128b0c64907160e0756d50523f35ebb278d70d8

  • SSDEEP

    192:Dm6JG62J06ifMpZCCjxVnZdfd6rY0zBpX98Jqi7a+:K6v60bfh8nYrYipa4im+

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      WormMars.exe

    • Size

      12KB

    • MD5

      1b81a0863eafb1a4b260df5c7c1d8621

    • SHA1

      7c218fa9d30d54966f472e6703123d13e38152f1

    • SHA256

      da8bdc38ab48cbe7b27d18b5527cf7329003467065247b622ed46df34c39f0a3

    • SHA512

      31b439f0c625962d05fcea28ce211c5a0d1c36ef4c6d634c5ecfc0878cb267a29662f731f775a9e58c1c86c05516ec446d90289c2d038ea4a4751493e40591ad

    • SSDEEP

      384:0v/QF7r8xe3OGgpCFooTMBfGnLKAKsO2:0HQFnBRgpCFXokLhDO

    Score
    7/10
    persistenceupx

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks