Overview

overview

10

Static

static

5

31a439db54...8N.exe

windows7-x64

10

31a439db54...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31a439db5449eb00ac458953cb3d4fa29cb9cd45b88fce70d8ee2c78e9339d18N.exe

  • Size

    29KB

  • Sample

    241211-dbrgqsxlbn

  • MD5

    c4593bcf296a1d84f98cbef77f425ad0

  • SHA1

    8b4db89314c3bb1560d66de00aa3bcc845efff25

  • SHA256

    31a439db5449eb00ac458953cb3d4fa29cb9cd45b88fce70d8ee2c78e9339d18

  • SHA512

    8b706998ec7106ae900d8909976878fe74cf7f502b7543fddaf8e47338704bc1a11fc6834028c772bf028f4b19c08295a6ca077db4240c6c5c5e4037a2c74416

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Li:AEwVs+0jNDY1qi/qG

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      31a439db5449eb00ac458953cb3d4fa29cb9cd45b88fce70d8ee2c78e9339d18N.exe

    • Size

      29KB

    • MD5

      c4593bcf296a1d84f98cbef77f425ad0

    • SHA1

      8b4db89314c3bb1560d66de00aa3bcc845efff25

    • SHA256

      31a439db5449eb00ac458953cb3d4fa29cb9cd45b88fce70d8ee2c78e9339d18

    • SHA512

      8b706998ec7106ae900d8909976878fe74cf7f502b7543fddaf8e47338704bc1a11fc6834028c772bf028f4b19c08295a6ca077db4240c6c5c5e4037a2c74416

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Li:AEwVs+0jNDY1qi/qG

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks