Overview

overview

10

Static

static

5

d6c463e8ec...6e.exe

windows7-x64

10

d6c463e8ec...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6c463e8ec88ba9b72edceb01de2a8cc7d357e16f975d5eabf7cec44ad4db56e

  • Size

    29KB

  • Sample

    240927-ckzn2azdll

  • MD5

    00d7607c2603c1022c6aebd207b34af6

  • SHA1

    78ffb640bb2b628fef4dc9ed1a6d2e16955993c5

  • SHA256

    d6c463e8ec88ba9b72edceb01de2a8cc7d357e16f975d5eabf7cec44ad4db56e

  • SHA512

    5b81485346f2bfa14fd7ef752291ffb879b91e4a484106831d4a188137c4f75dfde332304c95a2c1e20ad63d36b6f133b48cdd0448e6497d8cd6b890e2409c13

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/L/:AEwVs+0jNDY1qi/qz

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      d6c463e8ec88ba9b72edceb01de2a8cc7d357e16f975d5eabf7cec44ad4db56e

    • Size

      29KB

    • MD5

      00d7607c2603c1022c6aebd207b34af6

    • SHA1

      78ffb640bb2b628fef4dc9ed1a6d2e16955993c5

    • SHA256

      d6c463e8ec88ba9b72edceb01de2a8cc7d357e16f975d5eabf7cec44ad4db56e

    • SHA512

      5b81485346f2bfa14fd7ef752291ffb879b91e4a484106831d4a188137c4f75dfde332304c95a2c1e20ad63d36b6f133b48cdd0448e6497d8cd6b890e2409c13

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/L/:AEwVs+0jNDY1qi/qz

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks