Overview

overview

10

Static

static

5

444ba5fbe6...a2.exe

windows7-x64

10

444ba5fbe6...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe

  • Size

    29KB

  • Sample

    241206-fspqksxnfn

  • MD5

    49100a8e04b4f3d874a4dee6a7dff477

  • SHA1

    41e231d234be23cc123bdfbdab0c542f428b6686

  • SHA256

    444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2

  • SHA512

    100049e2e6f90053243dc77a23dde2707c4f5f40654cc3d678efd375728448f3b1f5f16533ce9b910629ae57a40ec8f4519309bff86e528e9bfc1a94c869ec8b

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/whR:AEwVs+0jNDY1qi/qIr

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2.exe

    • Size

      29KB

    • MD5

      49100a8e04b4f3d874a4dee6a7dff477

    • SHA1

      41e231d234be23cc123bdfbdab0c542f428b6686

    • SHA256

      444ba5fbe6bf77a2067767ecc3b5a3ade971ae8e6a475b5f607aa0ee473fc3a2

    • SHA512

      100049e2e6f90053243dc77a23dde2707c4f5f40654cc3d678efd375728448f3b1f5f16533ce9b910629ae57a40ec8f4519309bff86e528e9bfc1a94c869ec8b

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/whR:AEwVs+0jNDY1qi/qIr

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks