Overview

overview

10

Static

static

3

eafb3cd577...b0.exe

windows7-x64

10

eafb3cd577...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df6da732bb86be8652699d24900f1b51.zip

  • Size

    83KB

  • Sample

    240902-b9cecszajb

  • MD5

    d95402ec8744b12a67d0d4c58c1fa06c

  • SHA1

    b51e02e85dd4cc3ef83e80fe6946d3062812dac8

  • SHA256

    a0d6274ea53f26270a3790f0552e895c6c19b1ec5935c9e48474bbd1f95eae9e

  • SHA512

    5d04c15b2ebef31cc4a151bae49ed53e6debefaa811fbf7d463b4dd37dd2fe050cba8ba60972de0b3df443cbcd34864bf4d79b4a344bca40e3f02949e6556224

  • SSDEEP

    1536:RdqvB4ZXfYnXkUhZFpjTnc5q0XxNsu6NilxmJm0oFxXqB4s59S/SOTYoDLgkum1z:hCnXD7pjTc5bXXJ7idoFJA4WS/ZfLRuG

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      eafb3cd577be36d6e5dfecc609a710dadaea9e7295237c92e20c081965e9bbb0

    • Size

      204KB

    • MD5

      df6da732bb86be8652699d24900f1b51

    • SHA1

      edebbf75f9ef97c64feb523c483148b1aebfe559

    • SHA256

      eafb3cd577be36d6e5dfecc609a710dadaea9e7295237c92e20c081965e9bbb0

    • SHA512

      b32519c767370e5b1c6ce62d36316647afcdf9118223191b0bef93d947dc63f451142d8d5d2f895bc524c1f5cb1ce9eeb379503fde88db40df83cba7ae2395dd

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1D:Xo/BHng5HaVG4G/1z+QVMbg1D

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks