Overview

overview

10

Static

static

7

ade7ff4a62...c4.exe

windows7-x64

10

ade7ff4a62...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de541b7889d8c2dca83d44fa504247bbd553faad04ac357ff22c73d1d3a5b0db

  • Size

    2.5MB

  • Sample

    240831-v3bc9swekc

  • MD5

    ff9c5b2579fdf84b134fb4dd65c56659

  • SHA1

    63729ef802cd84307cefc2c0be33407862b45118

  • SHA256

    de541b7889d8c2dca83d44fa504247bbd553faad04ac357ff22c73d1d3a5b0db

  • SHA512

    5868d933ef72edd420661924d0e3eb91c6ded1d86339f33b174e9f9471b0e9b36ebd54777d10af795dc52a81e7e9ac27c3cebbf271a4fafcf2925cc2fb2919b5

  • SSDEEP

    49152:kgspKaiv15SoNEWslgZkPKuuhXxK0OWdxyNxG8zMc2dohfGsP7LYd:DwKamZygiPm/K0OT2fG1DY

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4

    • Size

      5.7MB

    • MD5

      132cb6ccbe20c89fc7216b7072bfb33f

    • SHA1

      bce08640b253d85e8942bcb26a28681dc875ff20

    • SHA256

      ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4

    • SHA512

      dbc3f555729f616c1a298780e7e6fc212e411737de1d74e72692efcea0a44a9c409d6112fee3659c065b6c77208ff37e5e52d1ee5ebf080d97cb4dd234f83496

    • SSDEEP

      98304:VbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbF:P

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks