Overview

overview

10

Static

static

3

c88bbe9f66...a7.exe

windows7-x64

10

c88bbe9f66...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c88bbe9f66baa07aae1c2868e9e3b9ae3052b95ff246074030f9148c72df0fa7.exe

  • Size

    204KB

  • Sample

    241122-jpjlyawrds

  • MD5

    156a9a84ab1b3bffb4ec916a2c154696

  • SHA1

    37762b30c2c3051e549903551dc0bd020ec89d4f

  • SHA256

    c88bbe9f66baa07aae1c2868e9e3b9ae3052b95ff246074030f9148c72df0fa7

  • SHA512

    43aa5b277e02558efdf7fb1acf8633bb06de02978dc926512148836d7f20d3621bca1252efef0e9d0f0efb729aa3c44e33477d59838f8dcfacd7cbe9f7bef723

  • SSDEEP

    3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1a:Xo/BHng5HaVG4G/1z+QVMbg1a

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      c88bbe9f66baa07aae1c2868e9e3b9ae3052b95ff246074030f9148c72df0fa7.exe

    • Size

      204KB

    • MD5

      156a9a84ab1b3bffb4ec916a2c154696

    • SHA1

      37762b30c2c3051e549903551dc0bd020ec89d4f

    • SHA256

      c88bbe9f66baa07aae1c2868e9e3b9ae3052b95ff246074030f9148c72df0fa7

    • SHA512

      43aa5b277e02558efdf7fb1acf8633bb06de02978dc926512148836d7f20d3621bca1252efef0e9d0f0efb729aa3c44e33477d59838f8dcfacd7cbe9f7bef723

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1a:Xo/BHng5HaVG4G/1z+QVMbg1a

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks