Overview

overview

10

Static

static

10

6f87e8073d...fN.exe

windows7-x64

10

6f87e8073d...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f87e8073d666df3cefb36bc68cccec0f8f29d4d6cbffa3942a598ab52ee8d4fN.exe

  • Size

    28KB

  • Sample

    241118-ck49hswdql

  • MD5

    ca91f6768ca4024dd0e08a3078d3a920

  • SHA1

    178fe04ad2669eacb6b5fbb107808fd76fa9048c

  • SHA256

    6f87e8073d666df3cefb36bc68cccec0f8f29d4d6cbffa3942a598ab52ee8d4f

  • SHA512

    0a2f64b0afedaf1affb51c07e0061b400c821776bef9cbc6ccf229972fc60431224c0e93a7680937a1478497acba87d0ca8db24cf63c7855ae2c8c2758135fd4

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNk:Dv8IRRdsxq1DjJcqfb

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      6f87e8073d666df3cefb36bc68cccec0f8f29d4d6cbffa3942a598ab52ee8d4fN.exe

    • Size

      28KB

    • MD5

      ca91f6768ca4024dd0e08a3078d3a920

    • SHA1

      178fe04ad2669eacb6b5fbb107808fd76fa9048c

    • SHA256

      6f87e8073d666df3cefb36bc68cccec0f8f29d4d6cbffa3942a598ab52ee8d4f

    • SHA512

      0a2f64b0afedaf1affb51c07e0061b400c821776bef9cbc6ccf229972fc60431224c0e93a7680937a1478497acba87d0ca8db24cf63c7855ae2c8c2758135fd4

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNk:Dv8IRRdsxq1DjJcqfb

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks