Overview

overview

10

Static

static

5

fa7f9b9e13...28.exe

windows7-x64

10

fa7f9b9e13...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa7f9b9e13c3bdfb3566325797c108aa85c3cbbb2f49865f87efa9f11eaa9a28

  • Size

    29KB

  • Sample

    241125-gkxlwssjgs

  • MD5

    3a00a5a8cf33d2168ca840223d9b27cd

  • SHA1

    46c8a63949a53fdb040f24b8fc84106949b95b0a

  • SHA256

    fa7f9b9e13c3bdfb3566325797c108aa85c3cbbb2f49865f87efa9f11eaa9a28

  • SHA512

    20c4e0f1084c7f0351b116a2675ddb5f2b1df2a618cb736d6d972e5b5e6834f0268185a5b36937e97e360b669aaab960e5d75099d3c1d16a3c4ee5cce7748517

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/3:AEwVs+0jNDY1qi/qP

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      fa7f9b9e13c3bdfb3566325797c108aa85c3cbbb2f49865f87efa9f11eaa9a28

    • Size

      29KB

    • MD5

      3a00a5a8cf33d2168ca840223d9b27cd

    • SHA1

      46c8a63949a53fdb040f24b8fc84106949b95b0a

    • SHA256

      fa7f9b9e13c3bdfb3566325797c108aa85c3cbbb2f49865f87efa9f11eaa9a28

    • SHA512

      20c4e0f1084c7f0351b116a2675ddb5f2b1df2a618cb736d6d972e5b5e6834f0268185a5b36937e97e360b669aaab960e5d75099d3c1d16a3c4ee5cce7748517

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/3:AEwVs+0jNDY1qi/qP

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks