Overview

overview

10

Static

static

7

2d12d8fa08...cN.exe

windows7-x64

10

2d12d8fa08...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d12d8fa0820e20fd384962f08ac022928f75c18a0800e85eb906e078d4f090cN

  • Size

    29KB

  • Sample

    240919-h2blesxark

  • MD5

    083b952383e735c23497d673730f76a0

  • SHA1

    e06a62d9c46de1d14d03a57ea0f3d56b7be2aa20

  • SHA256

    2d12d8fa0820e20fd384962f08ac022928f75c18a0800e85eb906e078d4f090c

  • SHA512

    788a7e4d59d4d7c857133036b5feef5d5cfba09292b8bbd5f53052ec5a9193a3ba7410c749ee3b33c2ad33e77fc830d009ca1391e8eb0d86c8eec46197ca533e

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/jG0:AEwVs+0jNDY1qi/q7G0

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      2d12d8fa0820e20fd384962f08ac022928f75c18a0800e85eb906e078d4f090cN

    • Size

      29KB

    • MD5

      083b952383e735c23497d673730f76a0

    • SHA1

      e06a62d9c46de1d14d03a57ea0f3d56b7be2aa20

    • SHA256

      2d12d8fa0820e20fd384962f08ac022928f75c18a0800e85eb906e078d4f090c

    • SHA512

      788a7e4d59d4d7c857133036b5feef5d5cfba09292b8bbd5f53052ec5a9193a3ba7410c749ee3b33c2ad33e77fc830d009ca1391e8eb0d86c8eec46197ca533e

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/jG0:AEwVs+0jNDY1qi/q7G0

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks