mydoom | 00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f | Triage

Submit
Reports

Overview

overview

Static

static

00e7cd71d4...1f.exe

windows7-x64

00e7cd71d4...1f.exe

windows10-2004-x64

Sharing

General

Target

00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f
Size

53KB
Sample

241114-xsmdwssbnc
MD5

f132601ccb69f6eb31588c61ede84f88
SHA1

74d717ba9620c7db5ce1ab60d91620515231cd42
SHA256

00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f
SHA512

f3bc7c7d57989203190854a4573397b5612bbee094a2bda20ed12ae479b8ee7a826937079a4aac3b3fc2ecebe710b2611edab10362b8a3497178a890e788cd0b
SSDEEP

768:SCIqdH/k1ZVcT194jp4B9MckRFJzsNEJqr900PcAeG6avrKAoYaT7VsoxKrD4:SNqaLV8a6BuckXJzsD9CDG6a+9HZxK4

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f.exe

Resource

win7-20241023-en

mydoom discovery persistence upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f
- Size
  
  53KB
- MD5
  
  f132601ccb69f6eb31588c61ede84f88
- SHA1
  
  74d717ba9620c7db5ce1ab60d91620515231cd42
- SHA256
  
  00e7cd71d4f60927f1c2f313e283452ef96fb4363c8914aecb81a229d6a6191f
- SHA512
  
  f3bc7c7d57989203190854a4573397b5612bbee094a2bda20ed12ae479b8ee7a826937079a4aac3b3fc2ecebe710b2611edab10362b8a3497178a890e788cd0b
- SSDEEP
  
  768:SCIqdH/k1ZVcT194jp4B9MckRFJzsNEJqr900PcAeG6avrKAoYaT7VsoxKrD4:SNqaLV8a6BuckXJzsD9CDG6a+9HZxK4
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy