Overview

overview

10

Static

static

5

d1922436a6...56.exe

windows7-x64

10

d1922436a6...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1922436a615dd6f224bfb212761f2382528a76b5cacd8495e3477c9ae18c056.exe

  • Size

    29KB

  • Sample

    241124-zh3n8symf1

  • MD5

    ac3b4e176e8e386f1244498ead19c685

  • SHA1

    522a0d5c369d60a9c0a47e6cf7f9e39cf6f783d7

  • SHA256

    d1922436a615dd6f224bfb212761f2382528a76b5cacd8495e3477c9ae18c056

  • SHA512

    41295bf905de3842e672f17143b081eb3cac0d16d13a688ea4e6f1e2c3ea51fb283460240807d88baed3fdf4e7e8d9fe53313eb83fc5b08fff80c04dec598bfc

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/8:AEwVs+0jNDY1qi/qU

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      d1922436a615dd6f224bfb212761f2382528a76b5cacd8495e3477c9ae18c056.exe

    • Size

      29KB

    • MD5

      ac3b4e176e8e386f1244498ead19c685

    • SHA1

      522a0d5c369d60a9c0a47e6cf7f9e39cf6f783d7

    • SHA256

      d1922436a615dd6f224bfb212761f2382528a76b5cacd8495e3477c9ae18c056

    • SHA512

      41295bf905de3842e672f17143b081eb3cac0d16d13a688ea4e6f1e2c3ea51fb283460240807d88baed3fdf4e7e8d9fe53313eb83fc5b08fff80c04dec598bfc

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/8:AEwVs+0jNDY1qi/qU

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks