Overview

overview

10

Static

static

10

5689d9d0ba...bc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5689d9d0ba571e5171d3ffd56bc267b34b076cd5e8121c7509d906808d8ac4bc
  • Size 90KB
  • Sample260907-j2s15sff97
  • SHA256 5689d9d0ba571e5171d3ffd56bc267b34b076cd5e8121c7509d906808d8ac4bc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
wabotdiscoverypersistenceworm

Malware Config

Targets

    • Target
      5689d9d0ba571e5171d3ffd56bc267b34b076cd5e8121c7509d906808d8ac4bc
    • Size 90KB
    • SHA256 5689d9d0ba571e5171d3ffd56bc267b34b076cd5e8121c7509d906808d8ac4bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverywabotpersistenceworm

    • Detects Wabot worm

    • Family: Wabot

      Wabot is a Windows worm written in C++.

      wormwabot

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks