Overview

overview

10

Static

static

7

9c5a76b55d...0N.exe

windows7-x64

10

9c5a76b55d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c5a76b55d823e2fcbb972b0c2bf5860N.exe

  • Size

    41KB

  • Sample

    240903-jhrzqs1dpk

  • MD5

    9c5a76b55d823e2fcbb972b0c2bf5860

  • SHA1

    f8e575dd2f8ccf846e275829d2bc6ff3a022a2c5

  • SHA256

    0ed458935365ad6f69b5d61d2775db74559d9f7cafc9a26300c609293ace9520

  • SHA512

    f6f06bd451e81b8576d207757daf7a87e185affbf245f92f29d0672cbe44ba99e480323dbf7e3645f90f630fcaf31b6dac9f918d94f33ab9811a411d80ccf941

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      9c5a76b55d823e2fcbb972b0c2bf5860N.exe

    • Size

      41KB

    • MD5

      9c5a76b55d823e2fcbb972b0c2bf5860

    • SHA1

      f8e575dd2f8ccf846e275829d2bc6ff3a022a2c5

    • SHA256

      0ed458935365ad6f69b5d61d2775db74559d9f7cafc9a26300c609293ace9520

    • SHA512

      f6f06bd451e81b8576d207757daf7a87e185affbf245f92f29d0672cbe44ba99e480323dbf7e3645f90f630fcaf31b6dac9f918d94f33ab9811a411d80ccf941

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks