Overview

overview

10

Static

static

7

effbfbbec6...8f.exe

windows7-x64

10

effbfbbec6...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b40a9bc8c11235de6b000605993bcda.zip

  • Size

    94KB

  • Sample

    240901-bf9g1awbrj

  • MD5

    5cdba4ac14cd77276e4ec650d5a6c628

  • SHA1

    26e4a34d8e88edff1f86147efd42a92ffd30f1eb

  • SHA256

    599ae381dfa5a7561b25847b275b5f9d411c5e1d4d947a86c87bcaa287d301fd

  • SHA512

    eaec49cc4e4c27a6e951f05e5864a69eb321bd5e3637f31f3d4f4644a63da1d21be8ebed2130a976a9c0e3fc229975a40754f8c117acae9095545b82aa6c7192

  • SSDEEP

    1536:m2e0qS9JkyRbALq/tE+JmuitNNs5sU/sPCfbQIGzkOPLAQsojp:uZakyoq/JmNY/sKfbH8AQpl

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      effbfbbec6405fdd3ebc57014ca2cc5bf5208e93de509f77b98f6d44079e488f

    • Size

      224KB

    • MD5

      1b40a9bc8c11235de6b000605993bcda

    • SHA1

      d273fb8d41503acd4e3595353c62fbd4c3f38c67

    • SHA256

      effbfbbec6405fdd3ebc57014ca2cc5bf5208e93de509f77b98f6d44079e488f

    • SHA512

      d6bb7e95c31dca8fd83ac15160ee61ca8e9769dab0808f5c3d9c59565a6c1278a5be5ebd0b73ff0e0ad206e6147086245ca10066b32a022617fb90e5d76ae316

    • SSDEEP

      3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks