Overview

overview

10

Static

static

5

bd0a3078e7...4N.exe

windows7-x64

10

bd0a3078e7...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd0a3078e74a595d88b591ab08716f917da40ee4a39b0a6e31a985c3c28334e4N.exe

  • Size

    29KB

  • Sample

    241215-28xxsatmbk

  • MD5

    96df20065fc1c47323484a4885137920

  • SHA1

    0af7d5b6a26009d5aa6bdc0fb428dbfe5472cf02

  • SHA256

    bd0a3078e74a595d88b591ab08716f917da40ee4a39b0a6e31a985c3c28334e4

  • SHA512

    b3158293b58652ccfab7f55bf77daf323b51991d3f8f493398508a509a77372c7d8a549e2eba5a37a79ee4c6ceff81c715671a2cef3423500f903cf3d5a56f83

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/F:AEwVs+0jNDY1qi/qN

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      bd0a3078e74a595d88b591ab08716f917da40ee4a39b0a6e31a985c3c28334e4N.exe

    • Size

      29KB

    • MD5

      96df20065fc1c47323484a4885137920

    • SHA1

      0af7d5b6a26009d5aa6bdc0fb428dbfe5472cf02

    • SHA256

      bd0a3078e74a595d88b591ab08716f917da40ee4a39b0a6e31a985c3c28334e4

    • SHA512

      b3158293b58652ccfab7f55bf77daf323b51991d3f8f493398508a509a77372c7d8a549e2eba5a37a79ee4c6ceff81c715671a2cef3423500f903cf3d5a56f83

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/F:AEwVs+0jNDY1qi/qN

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks