Overview

overview

10

Static

static

5

bf258aa6a4...a9.exe

windows7-x64

10

bf258aa6a4...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf258aa6a4295692dc4d7e0fd05fef49461edcc94f84d8e7d5d33e8928e077a9.exe

  • Size

    29KB

  • Sample

    241211-t52gssvqfk

  • MD5

    163fbf83cbc6779e888b92692986324e

  • SHA1

    d9b967c7fcd131bf50de02b6aac14cc83eddcedb

  • SHA256

    bf258aa6a4295692dc4d7e0fd05fef49461edcc94f84d8e7d5d33e8928e077a9

  • SHA512

    2148fb0a14ea45a4d208102a61933da7358655836a66c4f20b2fb6d15c37009cda1ec7fca1aa8654274e74fb09a6543d1f3dd86565db497b3659dbe5f66d1b85

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/c:AEwVs+0jNDY1qi/qE

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      bf258aa6a4295692dc4d7e0fd05fef49461edcc94f84d8e7d5d33e8928e077a9.exe

    • Size

      29KB

    • MD5

      163fbf83cbc6779e888b92692986324e

    • SHA1

      d9b967c7fcd131bf50de02b6aac14cc83eddcedb

    • SHA256

      bf258aa6a4295692dc4d7e0fd05fef49461edcc94f84d8e7d5d33e8928e077a9

    • SHA512

      2148fb0a14ea45a4d208102a61933da7358655836a66c4f20b2fb6d15c37009cda1ec7fca1aa8654274e74fb09a6543d1f3dd86565db497b3659dbe5f66d1b85

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/c:AEwVs+0jNDY1qi/qE

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks