Overview

overview

10

Static

static

5

ad53ef35d0...dN.exe

windows7-x64

10

ad53ef35d0...dN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad53ef35d087b23c770a61c9c4f821f4dd22d5a6e128c66dc0c880afb8bff28dN.exe

  • Size

    41KB

  • Sample

    241126-ay768a1pfr

  • MD5

    7af6c11844c06003ddcd5900dde8c350

  • SHA1

    493dfcd4e9511149894213ca6feb0a9dc825efb8

  • SHA256

    ad53ef35d087b23c770a61c9c4f821f4dd22d5a6e128c66dc0c880afb8bff28d

  • SHA512

    3a72692f9bbcf2d37f1c48b490daca27ae6ffb5430ee68d6b93fc6571dcf254a7abfd90b9e705a75e6c198ad16a9a23a5c516bf083e09ce5a530f54d5a4fcdad

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ad53ef35d087b23c770a61c9c4f821f4dd22d5a6e128c66dc0c880afb8bff28dN.exe

    • Size

      41KB

    • MD5

      7af6c11844c06003ddcd5900dde8c350

    • SHA1

      493dfcd4e9511149894213ca6feb0a9dc825efb8

    • SHA256

      ad53ef35d087b23c770a61c9c4f821f4dd22d5a6e128c66dc0c880afb8bff28d

    • SHA512

      3a72692f9bbcf2d37f1c48b490daca27ae6ffb5430ee68d6b93fc6571dcf254a7abfd90b9e705a75e6c198ad16a9a23a5c516bf083e09ce5a530f54d5a4fcdad

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks