mydoom | 4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227 | Triage

Submit
Reports

Overview

overview

Static

static

4495983d20...7N.exe

windows7-x64

4495983d20...7N.exe

windows10-2004-x64

Sharing

General

Target

4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227N.exe
Size

79KB
Sample

241207-ydf41azmgw
MD5

933d621f46723638d497f45411cecf20
SHA1

6744d97c159dd05a23eedb5e8e645415160fde6c
SHA256

4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227
SHA512

ab4b4d13ce465504c70dd0562981f9fcbad4045ec725a97f84973c94f44f454ca3f8d5e24a575785bf2c053d50a53a46b60e638d5bbc556326ea7eea3e0f0aed
SSDEEP

1536:g7wc1aGNC0klI7CPpIFa6ks4fptMbd72yJgr1Fs5YzpS:g7wc1aOCo7CxI4s4fpSbIWwyYlS

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227N.exe

Resource

win7-20240708-en

mydoom discovery persistence upx worm

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227N.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

8 signatures

120 seconds

Malware Config

Targets

- Target
  
  4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227N.exe
- Size
  
  79KB
- MD5
  
  933d621f46723638d497f45411cecf20
- SHA1
  
  6744d97c159dd05a23eedb5e8e645415160fde6c
- SHA256
  
  4495983d205ae7ad20c70c92a069cd6a9f23ec763491bc99a53970926902f227
- SHA512
  
  ab4b4d13ce465504c70dd0562981f9fcbad4045ec725a97f84973c94f44f454ca3f8d5e24a575785bf2c053d50a53a46b60e638d5bbc556326ea7eea3e0f0aed
- SSDEEP
  
  1536:g7wc1aGNC0klI7CPpIFa6ks4fptMbd72yJgr1Fs5YzpS:g7wc1aOCo7CxI4s4fpSbIWwyYlS
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy