Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-11-2024 19:12
General
-
Target
046b0a762bc8daef7554fccfd5a4c449ae413db3af6f2592c32cf4fbaa660fa8.exe
-
Size
41KB
-
MD5
fe54fe643e417a834e0402be92bdab45
-
SHA1
953ceeceb59e6d0489bcba9f58156b7cbfa14edf
-
SHA256
046b0a762bc8daef7554fccfd5a4c449ae413db3af6f2592c32cf4fbaa660fa8
-
SHA512
82d46f4faebce68353db164cbb3f26005c28603f806cd54533719b3819950677ce56a218cee0888ae19a6fb085b6cb2bcf2740e97333c0de9fd2b62468c3ec0e
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\046b0a762bc8daef7554fccfd5a4c449ae413db3af6f2592c32cf4fbaa660fa8.exe"C:\Users\Admin\AppData\Local\Temp\046b0a762bc8daef7554fccfd5a4c449ae413db3af6f2592c32cf4fbaa660fa8.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
310B
MD52a8026547dafd0504845f41881ed3ab4
SHA1bedb776ce5eb9d61e602562a926d0fe182d499db
SHA256231fe7c979332b82ceccc3b3c0c2446bc2c3cab5c46fb7687c4bb579a8bba7ce
SHA5121f6fa43fc0cf5cbdb22649a156f36914b2479a93d220bf0e23a32c086da46dd37e8f3a789e7a405abef0782e7b3151087d253c63c6cefcad10fd47c699fbcf97
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
313B
MD5ffb72ab4faba49ad441ce07db37dd8b6
SHA1194e13c1c32ebb6e7a1dc912261cbd58a82ff71e
SHA2567bd7c3676e98ddde8e0d5b63dd22cb9379d975bcd1d68884c97565cdd8d03660
SHA512517be20d2442489ce39b48dc7f9f6f13f8c45d02703fb1865071f553d36b2289f5abc26c6089fc0bfad1a41fe318bf4b5a806915c5e45898ac744b7e4ed30257
-
Filesize
304B
MD5cde2c6ec81201bdd39579745c69d502f
SHA1e025748a7d4361b2803140ed0f0abda1797f5388
SHA256a81000fc443c3c99e0e653cca135e16747e63bccebd5052ed64d7ae6f63f227f
SHA512de5ca6169b2bb42a452ebd2f92c23bad3a98c01845a875336d6affe7f0192c2782b1f66f149019c0b880410c836fc45b2e9157dcccc7ad0d9e5953521a2151d4
-
Filesize
128B
MD55a45c5cbc57173bb03683a359f5b0e6d
SHA1d5271a78b08551da01b0537bc25c2b331593abcc
SHA256c05b7171439119cbf51872ab6e83add574bd12997c89b14d0ea7502dc24af59c
SHA512631fe01ae8eb02418fd1a5496d7bba990c725d7e9979aaaaf11978459e41f8447284bcb6e534a36e0b0f0ce7f366aa8720d42fd42df615460c2d3add91818065
-
Filesize
41KB
MD5f0b798338bd7f1d1e68227be7d5259a1
SHA1f5d339e2e53896e9a5e6c37a60c5c9dd67b892b1
SHA2569d481ee5f282704c369ef31a485ce102fb95c8daceb40ac89c71b09d4e69cf83
SHA512fcf1f66e49dc07a591a71d8d556f6abf1380fa6914daaa74b3db83bc2a6c1e18713398c3369fd8446fd5ca614bd06cbe74b4405a1d4135ae509a6f8ad5921426
-
Filesize
160B
MD5de9d4f0affd025a5cac659d4b1895aed
SHA154262d49483eceb55767fb9e54e579f4f6d9c3a9
SHA256e2258722fde9ad599184c422c62b16896eccb4b73c08387bafb06afda6ceec65
SHA51273ddcdaaaa61acc4e55ca0a3a167454d893ce28d1bf56e33a9f0994b097a7ed28e80c2396e067c3629cd258b5f31f865062ac35f49685c12fa46e1177f576eb2
-
Filesize
160B
MD5652c39bb301bca86929f52b961b18447
SHA1b57806e291353360b33d719142fc360e2d8874c7
SHA256c4ab8b039b1e592cbfc8596a0cfffcc14c5c941c384bd96730bb4f34f488b788
SHA51261c7b37b8af7dafa5be52ac4316bf9e4eec5860ac39827ac5f1bce294cfc48326193e01ac9c0233fdd2de84994dda344ab77104a9f6aeac144cd67951b0a6b0d
-
Filesize
160B
MD5842f73eaa7484c5bd0cb04791f99c9b8
SHA15331345735edc4572badb8e5c419e0731d6acb49
SHA2566faddae828e6d833e3d438fa92090051765a3b5983220f79acf3a2d74a923d2c
SHA51209b13298648ba49d92e85f2bf486727ce629f604508ccfafc52a2d6e500a0f643554db352f1e4f65c7ac71869e9602813668f4d6e5d7194f223829a1b2205a8c
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB