Overview

overview

10

Static

static

3

Vobfus W32-worm.zip

windows11-21h2-x64

1

Worm.Win32...AC.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Vobfus W32-worm.zip

  • Size

    19KB

  • Sample

    240520-sada2sfc6v

  • MD5

    e2c28a7e67008e8393f7de3a205cc142

  • SHA1

    7f5af40428e033a2a115eb9c44c7c7730e12403a

  • SHA256

    a7ea7c47ab2d05a476b33af71de0eca05de06503956c49345ce0339c91f6dc47

  • SHA512

    82f2fa9171db5f9911e10160980d7d3484747cfba3c5e745746bc4816471392284c2a0d45f2794bae73e695aaf2ad202c7c2929e94ae6f6571018117a9dc3b3c

  • SSDEEP

    384:kelZcGpSj/Uii7I2c+G0hqUJ9EAyNo2ZZElSiN63+ScD4HhyXc:keleGvZNvGYHIND/663+ScD4H0Xc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      Vobfus W32-worm.zip

    • Size

      19KB

    • MD5

      e2c28a7e67008e8393f7de3a205cc142

    • SHA1

      7f5af40428e033a2a115eb9c44c7c7730e12403a

    • SHA256

      a7ea7c47ab2d05a476b33af71de0eca05de06503956c49345ce0339c91f6dc47

    • SHA512

      82f2fa9171db5f9911e10160980d7d3484747cfba3c5e745746bc4816471392284c2a0d45f2794bae73e695aaf2ad202c7c2929e94ae6f6571018117a9dc3b3c

    • SSDEEP

      384:kelZcGpSj/Uii7I2c+G0hqUJ9EAyNo2ZZElSiN63+ScD4HhyXc:keleGvZNvGYHIND/663+ScD4H0Xc

    Score
    1/10
    behavioral1

    • Target

      Worm.Win32_Vobfus.AC.exe

    • Size

      53KB

    • MD5

      3d314beead79c0ed05dc7d3ffc399b36

    • SHA1

      a75813a0cf5f380cb87f5bdd230502a6b53157fe

    • SHA256

      793f93bed1d221e899cdeacc07ccd466c4ed5807835ef646006fe19e16685f18

    • SHA512

      900091fd38d0f2960e17a7667f995c9a034208b5a07d4664472f63af6e8b9557925dfbbe07312de7a703d08528a03a67fa4e4690cd927f377aae80a3fe5aaf92

    • SSDEEP

      1536:vNZg8r8QJYYS7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:9YYSJJjmLM3zRJWZsXy4Jt

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks