Overview

overview

10

Static

static

3

43ff037737...b0.exe

windows7-x64

10

43ff037737...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1de2da7e81fad7cf542b5ac3e295da07.zip

  • Size

    83KB

  • Sample

    240830-2p23ds1crr

  • MD5

    e28abec07278b5384ac60174d22e9016

  • SHA1

    c496eb37ccc69e2e4c64e8c4d170d4ba07b84ca7

  • SHA256

    64a0f384e75b03eebb44e8d407e5f15d5ebf11b1d1b6e902e6d94b0b1700342b

  • SHA512

    e639d6bf1de216f6e98b7349b7d628e4e1bcf57916175a60c7e8bff446cb40b4b0ab5c78a71ee251cacdfa287fabdbf3337fa676da3bf271b972a509f2c7e44f

  • SSDEEP

    1536:7WzlqSq2apzLaen1dSma3daPVqdLl5v5eM9vvnO5fjqhD/PN8sS9bNjo:7Wzwq43aen1e3dqqLl95eqXiKPmlHo

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      43ff037737ffba75364ef3f6228296d256f4e607487b16dfa5af4a57212ea5b0

    • Size

      200KB

    • MD5

      1de2da7e81fad7cf542b5ac3e295da07

    • SHA1

      2b6ac129f55c7a715bea221a44f484392f5124b1

    • SHA256

      43ff037737ffba75364ef3f6228296d256f4e607487b16dfa5af4a57212ea5b0

    • SHA512

      6a12e7ae28ba67bd52d3f8870d1412e526240fb90115f71af8cc3b2b8015bc542b50c23f13570af4ed515a656870ce4d43b4a042edb27575a98cef72b10f2397

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks