Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/12/2024, 09:04
General
-
Target
f062887334de264fb4a32c72dd6532704c86d2288e5f9bd71071fafe2265854c.exe
-
Size
29KB
-
MD5
f07cf4ff5e8bbb6ab63f531ae1d6a008
-
SHA1
dc508455df82aa36cca87d2cf07c8e196dd3863d
-
SHA256
f062887334de264fb4a32c72dd6532704c86d2288e5f9bd71071fafe2265854c
-
SHA512
d1d24d804b6e0c9bff5d5354dca0ed3f4a5d666d813da423e0426ca451f8226fd843f9c9a7a7eab239b8272da1b225c4ba561ba759edca09b2dd0025a886d12c
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/jhX:AEwVs+0jNDY1qi/qrx
Malware Config
Signatures
-
Detects MyDoom family 7 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f062887334de264fb4a32c72dd6532704c86d2288e5f9bd71071fafe2265854c.exe"C:\Users\Admin\AppData\Local\Temp\f062887334de264fb4a32c72dd6532704c86d2288e5f9bd71071fafe2265854c.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD58358d177652fb86e633c8ad42d1217f6
SHA12af4f3ab728f723047b57252c79cdf4479fd23c0
SHA256905d67269747b7b729a5c53e28a5d29b73c01d86149d426238904a2728d6a33e
SHA512e427818615ffc48374d83c42bf7b006b70b6ae27bf9196ba49d4114f63214252da7d9fdea68b1ba507e1636d09efd209f9f2ab085607db9699ff958e4ef06aa0
-
Filesize
320B
MD522f404b699ec49059fb366abc6a1e2fb
SHA1f6cd63e31afe12c18c82e82946c1afd801c1a4f2
SHA25668a5e169aea4fcd456004da94925303104456678a72d16ade72b2f69a1423bf3
SHA5128ee908c2f2b103cd5f0f6566786d099ed973ba5c08a59ed3739e7d85cc37b66224a6a808b51118a71595de444a24ae725e451add09a06985ff30b640432b5b2a
-
Filesize
320B
MD58faa3458da2fe55e9f683a30e9d53902
SHA15efcb0cf978f144ce8be8345a62191e1387daccd
SHA256167957f8b8a28963cc28722aa9ecf6d2d193cff92aef9b0b8c75b5bb5b3e3400
SHA512fd07e9156393c5df1cee5a22052495bad6398811dd34dd1b7630863ab424182fe89825b0cd746d2c72e121442614960dce5339f96955ac9ee5c7b8dd11be7b1b
-
Filesize
320B
MD510e250fb28333f5c1c5a0293d032812a
SHA10b79d611dc18b9843e26b160cffc83b71178b797
SHA256b2569a7f3b6d032c1be4bb2fa39380354a84bac81b31dde9ba27e69ed86a62ad
SHA512102d8f2f172dc64525d991fa9d1d4fe42957e9249c6c8e7a1751bde808adc7c8fd229228f5f9e8d6c271e41eb13a9caccd60a8b4e6267190c199b917757df631
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB