Overview

overview

10

Static

static

5

3116b29e93...b6.exe

windows7-x64

10

3116b29e93...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3116b29e93ccbfa5860ce02e15537d8f10543acc3b2982921e4a5ec8b4012bb6

  • Size

    29KB

  • Sample

    241124-z9hhdawmfl

  • MD5

    ad95b2eb8d8a92c1ef32f98b5db871d3

  • SHA1

    e4fe99f5e8db197686e1690efcf693b0127efa93

  • SHA256

    3116b29e93ccbfa5860ce02e15537d8f10543acc3b2982921e4a5ec8b4012bb6

  • SHA512

    96bb05d048c8dc7bc0787452abff2fff1af515d542f8d84e4b7ef83999ca63664d5f2025759c1d92ea00ec8b1175cdde3109fe46731bd63c54cae6e8bf0461a6

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/62:AEwVs+0jNDY1qi/qC2

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      3116b29e93ccbfa5860ce02e15537d8f10543acc3b2982921e4a5ec8b4012bb6

    • Size

      29KB

    • MD5

      ad95b2eb8d8a92c1ef32f98b5db871d3

    • SHA1

      e4fe99f5e8db197686e1690efcf693b0127efa93

    • SHA256

      3116b29e93ccbfa5860ce02e15537d8f10543acc3b2982921e4a5ec8b4012bb6

    • SHA512

      96bb05d048c8dc7bc0787452abff2fff1af515d542f8d84e4b7ef83999ca63664d5f2025759c1d92ea00ec8b1175cdde3109fe46731bd63c54cae6e8bf0461a6

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/62:AEwVs+0jNDY1qi/qC2

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks