Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-11-2024 21:19
General
-
Target
2c847c84b3227545363998f2dd4f6460207da67ddfedcf5291630e69e4922d52.exe
-
Size
29KB
-
MD5
14cc9680db1fa5a458831c8843c5f787
-
SHA1
bee2b9f7f57e9673af2c1dd6e93408bf0da4397c
-
SHA256
2c847c84b3227545363998f2dd4f6460207da67ddfedcf5291630e69e4922d52
-
SHA512
a226fe1a63198e9462a9d1dc60dc0b35c91f5d199e250c4481f8f4a6a57e1204b0ac0102c499b3040fcff677009d46ac27a02c9864a70321d19b1432147a9c4f
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/2:AEwVs+0jNDY1qi/qu
Malware Config
Signatures
-
Detects MyDoom family 6 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c847c84b3227545363998f2dd4f6460207da67ddfedcf5291630e69e4922d52.exe"C:\Users\Admin\AppData\Local\Temp\2c847c84b3227545363998f2dd4f6460207da67ddfedcf5291630e69e4922d52.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD5f6b2e56c04aaf22b6d082bbab618ac9c
SHA12fe2f9c7a40ec830623b4e45582136ae70a5ef83
SHA256c2c2b533e8210a37481e812c227b3f2632e6d597f420cecbfba8c1e8303f1453
SHA512ac9675730d9e03f8789e5a88d310c5089c4df893e18aaacb6f2f59a26c8fc02c9138f47c4a3409c4a6571aee11570edd70bd558b09e80ba76e103eebb2741fad
-
Filesize
320B
MD5ab792a751c5e06136a86d2031d05d303
SHA14c310093cff60a184aa99bea9d5a686b16f2841f
SHA256c88a0320e7a1d3283c8b87d4d19d8739cafcaf1738a7a837acd36752e6c76698
SHA512bb48124ab1825ae4bc73d00991c83599fac9c43edce058fcf907e073fb05a2ca180a0283a52049062eee6503c09e80677dd88f5564955c681ac3d3ef84f975dc
-
Filesize
320B
MD508b8ee1d17a4c0cda2c1817f447d3916
SHA1bacea9df58f99343a09ce1b4d906e9f7a2298307
SHA256dc9b96dd27ce75df20e87a547cff35e1ef9c06fc906aeacb6967476e154aecbe
SHA5129218aff3d713f3154825f7a3fed96adecc7a31428f403762da892a4d6144db432f240f9abf84587b76ecd82be85eff005e0ab46d8e2a31b4c7cf950e4b47da15
-
Filesize
320B
MD5f74c57165d42082fa53fdb5ea37740b7
SHA180350a4102d6b9727f79da437e2fea5d3b95580e
SHA2565a26fd592ee438f176a7c3bfbea77e3920f41dbdc7ab08d2aaa7b9c76479277b
SHA51299f189e856df420d8b92f5e4d05be446e00f3e5c9d372e1d8a36abbff62f452b761821cd7744b4b2edfe0b2aff7068ce0ff1b6b3b4da4170cc44a3b33ef2b1b9
-
Filesize
320B
MD58e73c249272bd3ce8d6bd9ecf6075ef3
SHA144c62df667093754f01fdc390d910e208173d0a1
SHA256e2b092fdec256ae80bdc698e222eed80fcb5dac3d3c3d009afce9b48d47da2a6
SHA5121efe8628b548bfcf0bcb39ddd9b1f12c486f0960881587a1d5c776c7ed832b35ee8d2a7091d4ab1abc61304507a0defb95f564825dba149114f3f17b1a4b4699
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB