Overview

overview

10

Static

static

5

af016ddeda...cf.exe

windows7-x64

10

af016ddeda...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af016ddeda82e1a639ce1f923315063f22a6d5ff8fa87c12ed1bdfffdc2d1dcf.exe

  • Size

    29KB

  • Sample

    241125-fxvsdswnhr

  • MD5

    225fcf31212cb2fd996cf28cb0321ad0

  • SHA1

    51c65810e28026f3a0e4a2bdd04f6bb07dc6a8b6

  • SHA256

    af016ddeda82e1a639ce1f923315063f22a6d5ff8fa87c12ed1bdfffdc2d1dcf

  • SHA512

    97bcca925442462230595fc41674ff97b3f6e341f734967effe3e02a946ca31d12c1ad3c37b745a7968b8886b2b15d4cc49aca6a5fb23c3b3d827c6297b560fd

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/0:AEwVs+0jNDY1qi/qc

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      af016ddeda82e1a639ce1f923315063f22a6d5ff8fa87c12ed1bdfffdc2d1dcf.exe

    • Size

      29KB

    • MD5

      225fcf31212cb2fd996cf28cb0321ad0

    • SHA1

      51c65810e28026f3a0e4a2bdd04f6bb07dc6a8b6

    • SHA256

      af016ddeda82e1a639ce1f923315063f22a6d5ff8fa87c12ed1bdfffdc2d1dcf

    • SHA512

      97bcca925442462230595fc41674ff97b3f6e341f734967effe3e02a946ca31d12c1ad3c37b745a7968b8886b2b15d4cc49aca6a5fb23c3b3d827c6297b560fd

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/0:AEwVs+0jNDY1qi/qc

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks