Overview

overview

10

Static

static

5

26b8a6a4f7...9N.exe

windows7-x64

10

26b8a6a4f7...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26b8a6a4f788b3b2ae7e910d3a8d9198bf4876b1bf4f8e613cf56003690306b9N.exe

  • Size

    41KB

  • Sample

    241125-2z5aha1lgw

  • MD5

    b92cb2f14d8a855b178db5a5abf172b0

  • SHA1

    2d859848a7ad3e6a08f623f5d1f68e4cad8a2d98

  • SHA256

    26b8a6a4f788b3b2ae7e910d3a8d9198bf4876b1bf4f8e613cf56003690306b9

  • SHA512

    846ef07fa3dde6662c8ffbe7cdca2826ed8e8f325ce51abf9aa5419966cc19ba32b080315affa5442b4cd83858d00ffec2a4d0b4f844a4329fa09663dd644457

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/s:AEwVs+0jNDY1qi/q0

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      26b8a6a4f788b3b2ae7e910d3a8d9198bf4876b1bf4f8e613cf56003690306b9N.exe

    • Size

      41KB

    • MD5

      b92cb2f14d8a855b178db5a5abf172b0

    • SHA1

      2d859848a7ad3e6a08f623f5d1f68e4cad8a2d98

    • SHA256

      26b8a6a4f788b3b2ae7e910d3a8d9198bf4876b1bf4f8e613cf56003690306b9

    • SHA512

      846ef07fa3dde6662c8ffbe7cdca2826ed8e8f325ce51abf9aa5419966cc19ba32b080315affa5442b4cd83858d00ffec2a4d0b4f844a4329fa09663dd644457

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/s:AEwVs+0jNDY1qi/q0

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks