Overview

overview

10

Static

static

3

402b7f6127...02.exe

windows7-x64

10

402b7f6127...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55b81333ce5bdb1c3f57663be945cdb918a7052774d30c6a65b96b5082c43ede

  • Size

    83KB

  • Sample

    240904-w11qtavblr

  • MD5

    9c05a300d65ac1a28452db15b5ea742d

  • SHA1

    2a48148f02367957f3bb27d61004de9f7b5cf83c

  • SHA256

    55b81333ce5bdb1c3f57663be945cdb918a7052774d30c6a65b96b5082c43ede

  • SHA512

    4aecadb25612173a429e6a3ff5189f2c5adf97be8db9225e9924362344930c44aa58eabc6507848093649c2f6e5676dc664f03f98911d19d80d9b591e34dd899

  • SSDEEP

    1536:jZhYHV9u8eVhbO0mb9F4ovPPNYk4BslSR2vUQf70zshIH/7myLg:j/AlmN0Z/4BHmTf70zsOHTmyE

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      402b7f6127a11b824e618e6bc2adb6005a46081fe9252020cacabdb32c4a6302

    • Size

      204KB

    • MD5

      6c3c5dd37301cefb88af00b46cb67587

    • SHA1

      87f871215a1a786ce9ce477620fbbdaf8c86d5b7

    • SHA256

      402b7f6127a11b824e618e6bc2adb6005a46081fe9252020cacabdb32c4a6302

    • SHA512

      98cfd9402657bd4184acba374d1a82de3b290bb6cdb55eb1017505f10e38925c4360ba6acc4a2ca4ff0ad83904ed89d56cac844b8bd9621a0080b096dacd1ff0

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks