Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-12-2024 23:54
General
-
Target
77a48a207b6422159d34da82f3f51e1d06ae410442b1ac8c63cd1c3e2e67d051.exe
-
Size
29KB
-
MD5
120c9a26d054883386ffff27829ada18
-
SHA1
ec30b77106ae777e32c0efd6babf57e75026b14e
-
SHA256
77a48a207b6422159d34da82f3f51e1d06ae410442b1ac8c63cd1c3e2e67d051
-
SHA512
a416884e3b9c7a9fd44acfc6607d78a1ed766e165e3fe701713d09a2f6110644d3093b5febbf0a67be0ab0f2f6fddbf1fafc953285b4121709efe6343ca542c9
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9//L:AEwVs+0jNDY1qi/q7
Malware Config
Signatures
-
Detects MyDoom family 8 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77a48a207b6422159d34da82f3f51e1d06ae410442b1ac8c63cd1c3e2e67d051.exe"C:\Users\Admin\AppData\Local\Temp\77a48a207b6422159d34da82f3f51e1d06ae410442b1ac8c63cd1c3e2e67d051.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
305B
MD5157431349a057954f4227efc1383ecad
SHA169ccc939e6b36aa1fabb96ad999540a5ab118c48
SHA2568553409a8a3813197c474a95d9ae35630e2a67f8e6f9f33b3f39ef4c78a8bfac
SHA5126405adcfa81b53980f448c489c1d13506d874d839925bffe5826479105cbf5ba194a7bdb93095585441c79c58de42f1dab1138b3d561011dc60f4b66d11e9284
-
Filesize
302B
MD5769768a36c7e2fcb2db7f35ef986ce82
SHA10b6699476462d2139e553f0f78ff46890d37d336
SHA256f262291ff7be8b0e2e846525c772c214799fc26b244abad6a686c7c4ff8cbba2
SHA5122fa0310627270dac3f4e581bef0036743eed32403f913c833aeafdf7fac373ccfb0117cabd94725dfee672345ca3f46182377340e15e2fba38a874946683ee67
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD5ad7770edb72a27ea4fbf0d85f678da04
SHA1a7f90300fdea25f70a5072a9db11b7ffa0e812e7
SHA2564f8a44d94cd5b7eb006ef4ec7736728b3710aec70ecc0eacab949632bcd291ae
SHA512683d602aaf8a6dc0d4ba26d843bb739a47fd27d268f48576886a474223288cce91f4ec748b1bc69098203a2aca185bc2ad874cfcce56315c836c8b25d123d62a
-
Filesize
320B
MD5a49931e7720109faf5d131d9790a9410
SHA105c5beee7d08a94ec77ef7fb980083f3a84b1bb8
SHA2561d37f17874eb10dc7ae74a5d8f6aa3f7b711f4b81700dc101bce2c9f5f0dfc33
SHA512fd914c4dff6986e59382637cf999ef5c002d04b7daa433d968b3c28675f38d69b7bebf308e24b35e71bc023028738d45fd40e7f9a7e2369d1ee25ab253971783
-
Filesize
352B
MD5aca71c899b381d008bedbeb5f06cf0f4
SHA1034132932993594ed1babc90f2390fc1a31a8cba
SHA256686bc3a5b4c613dddedd4ad17491bbead44459a77b25920297ddc19a44a09623
SHA51230e9a188a475644703ab445a5adc41d3f7c5ad6884696ec5d8c738b57a73557f1fcc2a28143c925872c2ff0030c75704b29bc27e5489dc24445bc4e20582c8df
-
Filesize
352B
MD5650996716f2ce914b26c3e802fcc323b
SHA1941f2aa959936a55b6ad8881b08cf2e35f03145a
SHA256e9b7a4a0dcb16c658e3debba789e8fcb50bb193b2ee93c4407b89cd906860f52
SHA512f815ed300b66080fc94ed91638c36095111962fc29ee0a73ba7ddc2fe1f6a014a0c42c2818c77e3faefb698fb49d35d9bdcba843ea28ab0dbfdc513e6d9396a6
-
Filesize
352B
MD5a289d0aa6ef4e763dbfe9ec0fb609dad
SHA1ad8d18f8b8d3f1345d14b8d8ac7e546995a958f4
SHA2568b0a7545e57ea6f2c6a609fd9a7bc51a03a76269f18059ceaaaea57226fd0655
SHA512a7708e47b37cab04c314fab122ee2dbbd728c8e19482fdfdacc04ba3d7197c8d520b2b7389a57097dae6e6a6417200028dfae1defe5fd1eedfd2a7b9e7a59bb6
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB