Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-11-2024 09:31
General
-
Target
08eaef8a253f8d67a48a091828f46d7ccf7385c651adc33a36ac6658013f0eb1.exe
-
Size
41KB
-
MD5
6e6835ee9ae019b4fe3de97fe79e13be
-
SHA1
9afbc1f148a0939c29baa8f64d112e2d3ffe118e
-
SHA256
08eaef8a253f8d67a48a091828f46d7ccf7385c651adc33a36ac6658013f0eb1
-
SHA512
91deed62cbbdcba073e39ea6d4675af6033f65391fddd11452e1346fec236176f967483025955d4bfc7ba182953bc0a2e463a99e7ce31aa42bef72cdbc20dc0c
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/3:AEwVs+0jNDY1qi/qP
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08eaef8a253f8d67a48a091828f46d7ccf7385c651adc33a36ac6658013f0eb1.exe"C:\Users\Admin\AppData\Local\Temp\08eaef8a253f8d67a48a091828f46d7ccf7385c651adc33a36ac6658013f0eb1.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
308B
MD55243568476eb2052b2f3b67dc9053e86
SHA1b126aa6506772f9024b76580bdf28b45e3a7f051
SHA2562d458622dc76eb87e44cc7db89309efdf50f99821145ae86864fd1b714cbaa80
SHA5123c68cef4e3daa4bca6e8b3aa5a31874be1e4dec38fe9781c6fe4890980744527d0c6818eeb519f8e6b322118e1f08302d85972fa7da4ba8be9421aabf9a77833
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
310B
MD52a8026547dafd0504845f41881ed3ab4
SHA1bedb776ce5eb9d61e602562a926d0fe182d499db
SHA256231fe7c979332b82ceccc3b3c0c2446bc2c3cab5c46fb7687c4bb579a8bba7ce
SHA5121f6fa43fc0cf5cbdb22649a156f36914b2479a93d220bf0e23a32c086da46dd37e8f3a789e7a405abef0782e7b3151087d253c63c6cefcad10fd47c699fbcf97
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
304B
MD5267ddfdbb8d492b25de208d84b290f1c
SHA19f57d9f19f25549e1232489a0c101a92e851de2f
SHA256ef1f87447ae1ab45548d2934cf0dbd15a32b86359ff9fccfa48d76c1badf6586
SHA5120709aa62d39d419d335183235dcf328e1dfe6997bd9bfbdeb01bb050df8dcab63ec2d4f46e4718ab389fa8e12af66dec2e3019c8871ac6e40927a25cb706c6b3
-
Filesize
128B
MD512cfbbae6a8be11e4137e71e6341cd87
SHA11e33463ba59ea631e8b3a9c1b7b8f41036067930
SHA256c5ef25c32e8dd15950cf6c6656f0225d2a5ac701fd99aed9566846ef69f43f40
SHA51246dec20e93a47e4393ef649c3da8705203af5fb173428759e8ea5dc9efaa3f2f710aee0bb9fd41c46968cf4dcc96b2e44ee92eb46a31430926b01117039c90bb
-
Filesize
41KB
MD5b89f418cdd7967f3a3bb69ff01ec30ca
SHA1bf5305240c83640e4992776df86009e32a43dc8d
SHA256813f56b9495f2318b84a469f0da02cc049944a621f30cf21d8639a40810e1923
SHA5123c4f6fce5caa10e54d32e82e2ef04d0a0830812d6704f137acf2fcb81ea2a3af7347202ca42be75745edd72b0b0b4fd7d97b2d1f2c92ee8687aaebdf324fc615
-
Filesize
160B
MD57f2ba51a61e2816a61f5efcc234a37b8
SHA12585a924223d8c847d1cb742f8518e75705c387d
SHA256c0a2d49cac96ea061b8eb707f14ea1b327f71304025b648f906759e7df1933eb
SHA51223db29abbf8731cd1042464d02a0cdacbdb57020d5cdb75d0dd171332115ef9ff7baac58c4f6f68f2ace077e02c81d9894cc641e00668cd12f30172045d57742
-
Filesize
160B
MD545c096f1d5b5e5bcc1fe6b1347c08921
SHA1e33478185174f0dc3b494664c6d99df0f4a27546
SHA256c01ca0613721e8c21508052a95afbfc6e6abddf8924d4b1558982321d8fb92c5
SHA512473e7bec2f2c76ddb9bf75bc34da43009cb5bf01fa1e2cc0e9a37e066cf7e98d31f38de3f36e630658e76df012a1b2c64ad25b0b652d0b872e06d964bbec59c2
-
Filesize
160B
MD58909d44830925f136893c2efd79c7bc9
SHA135334df0620a5689c8758045456a79e7452b4a8a
SHA2561736a7fe1be97dd5fd61b0ca84c6be3f42556bf4d2dc4884908787f230c5175b
SHA512bac33884e7c144753faed70dfb7198ef14ca3013429f7f61ab3fb71900306e59f96842b4ccbd3a3876e9a3a6709f33ac10ef2133b03647fae7924b8f5dd0459c
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB