Overview

overview

10

Static

static

5

6f510997ae...4a.exe

windows7-x64

10

6f510997ae...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f510997ae8f0bf3d7c828c848132bc3f76e07b33e446820fcd668936c3baf4a.exe

  • Size

    29KB

  • Sample

    241210-j4bvmszpdy

  • MD5

    b508d84719ed87a44e72bf26503fcdb6

  • SHA1

    bd0da4f017b95a815d15f28e9a144a487eab35f1

  • SHA256

    6f510997ae8f0bf3d7c828c848132bc3f76e07b33e446820fcd668936c3baf4a

  • SHA512

    f3ae990483ca88cb92282f60705c589bda535d5a29835db5006ea68fb288cfb3b4bfca28a62ac9e6744de5537cb23c1ec90107cbb84e1151ea9bf2b6e4c992be

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Lm:AEwVs+0jNDY1qi/qy

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      6f510997ae8f0bf3d7c828c848132bc3f76e07b33e446820fcd668936c3baf4a.exe

    • Size

      29KB

    • MD5

      b508d84719ed87a44e72bf26503fcdb6

    • SHA1

      bd0da4f017b95a815d15f28e9a144a487eab35f1

    • SHA256

      6f510997ae8f0bf3d7c828c848132bc3f76e07b33e446820fcd668936c3baf4a

    • SHA512

      f3ae990483ca88cb92282f60705c589bda535d5a29835db5006ea68fb288cfb3b4bfca28a62ac9e6744de5537cb23c1ec90107cbb84e1151ea9bf2b6e4c992be

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Lm:AEwVs+0jNDY1qi/qy

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks