mydoom | ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731 | Triage

Submit
Reports

Overview

overview

Static

static

ef456a96a2...31.exe

windows7-x64

ef456a96a2...31.exe

windows10-2004-x64

Sharing

General

Target

ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731
Size

56KB
Sample

241118-hjx2ps1jfs
MD5

f264ce92457e37c134badc8967e95188
SHA1

e95041a4b870dbb12fe53d520dfd49f78b3d2829
SHA256

ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731
SHA512

2463bac8ac946bfdda913fc4f31f0d054eab48ca9c614112b05d470a24445eb78082be52f52dd08f9f6b22a9f6571ad57eee270ef5a0a905c4e72cffb445d0db
SSDEEP

768:aq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfTH0KoAZ:aqk/Zdic/qjh8MJDH++vCVKdZ

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731.exe

Resource

win7-20240729-en

mydoom discovery persistence upx worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731
- Size
  
  56KB
- MD5
  
  f264ce92457e37c134badc8967e95188
- SHA1
  
  e95041a4b870dbb12fe53d520dfd49f78b3d2829
- SHA256
  
  ef456a96a27a93b51d914c864eb0c98911bb5f72e5d3445387a972a9e19b6731
- SHA512
  
  2463bac8ac946bfdda913fc4f31f0d054eab48ca9c614112b05d470a24445eb78082be52f52dd08f9f6b22a9f6571ad57eee270ef5a0a905c4e72cffb445d0db
- SSDEEP
  
  768:aq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfTH0KoAZ:aqk/Zdic/qjh8MJDH++vCVKdZ
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy