mydoom | b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836 | Triage

Submit
Reports

Overview

overview

Static

static

5

b66c5dad38...36.exe

windows7-x64

b66c5dad38...36.exe

windows10-2004-x64

Sharing

General

Target

b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836
Size

29KB
Sample

241208-cs71dasmhp
MD5

ac9089a6ee50d68f65cf7c7d6528c5ef
SHA1

f363b607532d86d3c961756a6e76ed86bcec714a
SHA256

b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836
SHA512

9f2bb0e09bf29bcc6fb3d879ba030f35c600233de32a0ee0af9b01d32663d6def9fc72db5e8426e3e3cad3eb2e4a1c4e5fb9814efe17682abdbab59249a075b3
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/9:AEwVs+0jNDY1qi/ql

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836.exe

Resource

win7-20240903-en

mydoom discovery persistence upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836
- Size
  
  29KB
- MD5
  
  ac9089a6ee50d68f65cf7c7d6528c5ef
- SHA1
  
  f363b607532d86d3c961756a6e76ed86bcec714a
- SHA256
  
  b66c5dad38f1d9f405cd5268beb3a479848b096131380871be9fe54601924836
- SHA512
  
  9f2bb0e09bf29bcc6fb3d879ba030f35c600233de32a0ee0af9b01d32663d6def9fc72db5e8426e3e3cad3eb2e4a1c4e5fb9814efe17682abdbab59249a075b3
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/9:AEwVs+0jNDY1qi/ql
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy