Overview

overview

10

Static

static

5

5203c0b919...fN.exe

windows7-x64

10

5203c0b919...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5203c0b9196b3c1c200e04261a7eadcf7a2876fa1424e3b8375467571e2aaf8fN.exe

  • Size

    29KB

  • Sample

    241207-zs7e6stkby

  • MD5

    eaa9c12147870a2458289acd0a0a7860

  • SHA1

    5461e7b0e2a9808b8c4ffec5c64b4a1e8a83f568

  • SHA256

    5203c0b9196b3c1c200e04261a7eadcf7a2876fa1424e3b8375467571e2aaf8f

  • SHA512

    cb1f67d0f0c3838e19afc6e09c5f6573606a225f33178538ba907f84743587a925e7e1340ae18841c828b76740f6318b072ea756b0a466a9c1936ae0a39b2034

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/5:AEwVs+0jNDY1qi/qR

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      5203c0b9196b3c1c200e04261a7eadcf7a2876fa1424e3b8375467571e2aaf8fN.exe

    • Size

      29KB

    • MD5

      eaa9c12147870a2458289acd0a0a7860

    • SHA1

      5461e7b0e2a9808b8c4ffec5c64b4a1e8a83f568

    • SHA256

      5203c0b9196b3c1c200e04261a7eadcf7a2876fa1424e3b8375467571e2aaf8f

    • SHA512

      cb1f67d0f0c3838e19afc6e09c5f6573606a225f33178538ba907f84743587a925e7e1340ae18841c828b76740f6318b072ea756b0a466a9c1936ae0a39b2034

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/5:AEwVs+0jNDY1qi/qR

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks