Overview

overview

10

Static

static

5

0b7f2dd7b8...16.exe

windows7-x64

10

0b7f2dd7b8...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b7f2dd7b84cce9988e4afac3ad2ce7ecfe7bc4037df5a3a72c725933897b916

  • Size

    29KB

  • Sample

    241120-ylwjnasgll

  • MD5

    0c91c86fecc119492bbfb835870e5efc

  • SHA1

    c6c875328ed0188afac76724fc785d2be699bd35

  • SHA256

    0b7f2dd7b84cce9988e4afac3ad2ce7ecfe7bc4037df5a3a72c725933897b916

  • SHA512

    f010ba457eee7bd1b7c1b7c47cceb4861579e1a3ae5fe4d3fa870b6ddc9d6aa17959efb82a61a87405949f2066a4c4aae70af0f15773c221ea67fdd7deb2561e

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zKu3t:AEwVs+0jNDY1qi/q7/

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      0b7f2dd7b84cce9988e4afac3ad2ce7ecfe7bc4037df5a3a72c725933897b916

    • Size

      29KB

    • MD5

      0c91c86fecc119492bbfb835870e5efc

    • SHA1

      c6c875328ed0188afac76724fc785d2be699bd35

    • SHA256

      0b7f2dd7b84cce9988e4afac3ad2ce7ecfe7bc4037df5a3a72c725933897b916

    • SHA512

      f010ba457eee7bd1b7c1b7c47cceb4861579e1a3ae5fe4d3fa870b6ddc9d6aa17959efb82a61a87405949f2066a4c4aae70af0f15773c221ea67fdd7deb2561e

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zKu3t:AEwVs+0jNDY1qi/q7/

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks