Overview

overview

10

Static

static

7

fbe45e1b69...f7.exe

windows7-x64

10

fbe45e1b69...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbe45e1b6913241da1c4bf02bbf384d4d96109e73f4dfebce5ad5a2ee97037f7

  • Size

    41KB

  • Sample

    240919-d96djszbmm

  • MD5

    e1fd2f6a1e7d3df7ecc6a983ec584997

  • SHA1

    5479a02370df35845d7886efbdc7e659c9030e82

  • SHA256

    fbe45e1b6913241da1c4bf02bbf384d4d96109e73f4dfebce5ad5a2ee97037f7

  • SHA512

    134902ae68be5d7247681725f0d0d929395a4425778952b28b6c3829170ab8dc27a1fd92ddc5f1e220c13d7a65b3abc27cc8ec3be93ab266cc38bfbce26d7f2d

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      fbe45e1b6913241da1c4bf02bbf384d4d96109e73f4dfebce5ad5a2ee97037f7

    • Size

      41KB

    • MD5

      e1fd2f6a1e7d3df7ecc6a983ec584997

    • SHA1

      5479a02370df35845d7886efbdc7e659c9030e82

    • SHA256

      fbe45e1b6913241da1c4bf02bbf384d4d96109e73f4dfebce5ad5a2ee97037f7

    • SHA512

      134902ae68be5d7247681725f0d0d929395a4425778952b28b6c3829170ab8dc27a1fd92ddc5f1e220c13d7a65b3abc27cc8ec3be93ab266cc38bfbce26d7f2d

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks