Overview

overview

10

Static

static

5

44887d05bb...dN.exe

windows7-x64

10

44887d05bb...dN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    44887d05bb79305935ef018b2bab022cec756f9d16e9fb2b85d831f1c6e21f2dN.exe

  • Size

    29KB

  • Sample

    241125-3cxgtaymbk

  • MD5

    253cfdd1495b3b8d1d8d62b3f7626d90

  • SHA1

    0e5826bfb50f7b2cc873dc94ac6cbf09c11282be

  • SHA256

    44887d05bb79305935ef018b2bab022cec756f9d16e9fb2b85d831f1c6e21f2d

  • SHA512

    e69b7f5d124bf233e4d9f7a0179a5f4b0c18b83be2ca147216c8e13ad004e4ae4bb59a7ab346560414f100d9be29b424bbbfbbafe648ab7290e127b4bebd4391

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/muq:AEwVs+0jNDY1qi/qk

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      44887d05bb79305935ef018b2bab022cec756f9d16e9fb2b85d831f1c6e21f2dN.exe

    • Size

      29KB

    • MD5

      253cfdd1495b3b8d1d8d62b3f7626d90

    • SHA1

      0e5826bfb50f7b2cc873dc94ac6cbf09c11282be

    • SHA256

      44887d05bb79305935ef018b2bab022cec756f9d16e9fb2b85d831f1c6e21f2d

    • SHA512

      e69b7f5d124bf233e4d9f7a0179a5f4b0c18b83be2ca147216c8e13ad004e4ae4bb59a7ab346560414f100d9be29b424bbbfbbafe648ab7290e127b4bebd4391

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/muq:AEwVs+0jNDY1qi/qk

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks