Overview

overview

10

Static

static

5

b5d7a0d8c1...9N.exe

windows7-x64

10

b5d7a0d8c1...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5d7a0d8c1c9980904d19b7329978f49d409a79c74af13ebcb2b552add7e1a09N.exe

  • Size

    29KB

  • Sample

    241122-pddjfawndn

  • MD5

    e57005d459064a82ee8e5f769a67d060

  • SHA1

    a91cd4756b9570e3f546f0a5e4d0fffc499684e5

  • SHA256

    b5d7a0d8c1c9980904d19b7329978f49d409a79c74af13ebcb2b552add7e1a09

  • SHA512

    870fada00141f44a61cb1f4a4e0ad11944cfde27b53e36396069c78dd2d9486a21e4d2cffc8b68dd0364e93c4d7181aa0cf132a4ac7ed170c76a8d169ae36660

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Z3f:AEwVs+0jNDY1qi/qd

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      b5d7a0d8c1c9980904d19b7329978f49d409a79c74af13ebcb2b552add7e1a09N.exe

    • Size

      29KB

    • MD5

      e57005d459064a82ee8e5f769a67d060

    • SHA1

      a91cd4756b9570e3f546f0a5e4d0fffc499684e5

    • SHA256

      b5d7a0d8c1c9980904d19b7329978f49d409a79c74af13ebcb2b552add7e1a09

    • SHA512

      870fada00141f44a61cb1f4a4e0ad11944cfde27b53e36396069c78dd2d9486a21e4d2cffc8b68dd0364e93c4d7181aa0cf132a4ac7ed170c76a8d169ae36660

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Z3f:AEwVs+0jNDY1qi/qd

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks