Overview

overview

10

Static

static

5

dfc8e4a6ee...44.exe

windows7-x64

10

dfc8e4a6ee...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfc8e4a6eed81d14cd5573dd106d794eb15fdbe64bfaf5c89713d71fcd843644.exe

  • Size

    29KB

  • Sample

    241211-hsk4hasjev

  • MD5

    dc8ca3de3f3c37381c3fd617b175fee2

  • SHA1

    fab50e6149e1fd9507c82807fe1d52fa33d56da7

  • SHA256

    dfc8e4a6eed81d14cd5573dd106d794eb15fdbe64bfaf5c89713d71fcd843644

  • SHA512

    83853d9ec6703a2861672d1bab73fe275f50a6f855bd1e92d1755454e58f923046ad0748c18a6a3022a0317df3dae1e5cc72200eca3e81d5f92e4649fcba02d1

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/u:AEwVs+0jNDY1qi/qm

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      dfc8e4a6eed81d14cd5573dd106d794eb15fdbe64bfaf5c89713d71fcd843644.exe

    • Size

      29KB

    • MD5

      dc8ca3de3f3c37381c3fd617b175fee2

    • SHA1

      fab50e6149e1fd9507c82807fe1d52fa33d56da7

    • SHA256

      dfc8e4a6eed81d14cd5573dd106d794eb15fdbe64bfaf5c89713d71fcd843644

    • SHA512

      83853d9ec6703a2861672d1bab73fe275f50a6f855bd1e92d1755454e58f923046ad0748c18a6a3022a0317df3dae1e5cc72200eca3e81d5f92e4649fcba02d1

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/u:AEwVs+0jNDY1qi/qm

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks