mydoom | 0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf | Triage

Submit
Reports

Overview

overview

Static

static

0bc06c3007...bf.exe

windows7-x64

0bc06c3007...bf.exe

windows10-2004-x64

Sharing

General

Target

0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf
Size

50KB
Sample

241121-yd8h9avrhx
MD5

273860c59ba303ecab17a74b5456380e
SHA1

65470c6b7532768a2e4e0502a23aec6245130107
SHA256

0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf
SHA512

fa2660940470c5032825742b22b4b5214c5fecca7b23acacb3bccc6e27e9019371092a4d13ffec311fb44c2047118d3596cb446a0694d3a30c16985404168027
SSDEEP

768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3e4xqbZolf4HWnxZnksrHREUHQTC:/g7wc1aGNC0klI7CPN3LEVo6HWnldHQ2

Score

10^/10

mydoom discovery persistence worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf.exe

Resource

win7-20240903-en

mydoom discovery persistence worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf
- Size
  
  50KB
- MD5
  
  273860c59ba303ecab17a74b5456380e
- SHA1
  
  65470c6b7532768a2e4e0502a23aec6245130107
- SHA256
  
  0bc06c30073e1d32ecdf879db723d9a5e83040cf0bc26ddaf664e5d6abea43bf
- SHA512
  
  fa2660940470c5032825742b22b4b5214c5fecca7b23acacb3bccc6e27e9019371092a4d13ffec311fb44c2047118d3596cb446a0694d3a30c16985404168027
- SSDEEP
  
  768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3e4xqbZolf4HWnxZnksrHREUHQTC:/g7wc1aGNC0klI7CPN3LEVo6HWnldHQ2
Score

10^/10

mydoom discovery persistence worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceworm

behavioral2

mydoomdiscoverypersistenceworm

© 2018-2024

Terms | Privacy