Overview

overview

10

Static

static

7

b6abfa255a...73.exe

windows7-x64

10

b6abfa255a...73.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6abfa255a4a68f4844cb878ef6578ee9f9017dc22d2ac3a2f1d688a02fc8c73

  • Size

    41KB

  • Sample

    240911-mj1j2swdna

  • MD5

    81b2138f565353f74d39ea331145c7a5

  • SHA1

    fea28cb2d6ac2b180f763a6d4d06ecd85e0928c4

  • SHA256

    b6abfa255a4a68f4844cb878ef6578ee9f9017dc22d2ac3a2f1d688a02fc8c73

  • SHA512

    6d385ccdc68625cfd1e4b70f27aced88cf9f0c5e43429ef2da85d58f1a54b41f9ecd31b2d29dacffe64f210331998718cb1c3a8888fe758e2ef31ced1f9546cb

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      b6abfa255a4a68f4844cb878ef6578ee9f9017dc22d2ac3a2f1d688a02fc8c73

    • Size

      41KB

    • MD5

      81b2138f565353f74d39ea331145c7a5

    • SHA1

      fea28cb2d6ac2b180f763a6d4d06ecd85e0928c4

    • SHA256

      b6abfa255a4a68f4844cb878ef6578ee9f9017dc22d2ac3a2f1d688a02fc8c73

    • SHA512

      6d385ccdc68625cfd1e4b70f27aced88cf9f0c5e43429ef2da85d58f1a54b41f9ecd31b2d29dacffe64f210331998718cb1c3a8888fe758e2ef31ced1f9546cb

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks