Overview

overview

10

Static

static

5

ef0ec8f13c...5N.exe

windows7-x64

10

ef0ec8f13c...5N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef0ec8f13c48483a9fc27758a224fb5a2ac65da143f4542bc3c5a6dbd9b51955N.exe

  • Size

    29KB

  • Sample

    241216-cq8h5azrhl

  • MD5

    c735aace32cd7b5175dae414380dbb30

  • SHA1

    a96fa28ebdb1b863c4a639cbfa8ec0c1aa1a62fc

  • SHA256

    ef0ec8f13c48483a9fc27758a224fb5a2ac65da143f4542bc3c5a6dbd9b51955

  • SHA512

    93a630a7516a16eb2d1c21065b8007d731ec0814ad4c18aae077e4477ba9b3eb6054ff70f417de95cc40264834854734a79453e615d048da6f66b7ef46a6eb18

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/fQ:AEwVs+0jNDY1qi/qg

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ef0ec8f13c48483a9fc27758a224fb5a2ac65da143f4542bc3c5a6dbd9b51955N.exe

    • Size

      29KB

    • MD5

      c735aace32cd7b5175dae414380dbb30

    • SHA1

      a96fa28ebdb1b863c4a639cbfa8ec0c1aa1a62fc

    • SHA256

      ef0ec8f13c48483a9fc27758a224fb5a2ac65da143f4542bc3c5a6dbd9b51955

    • SHA512

      93a630a7516a16eb2d1c21065b8007d731ec0814ad4c18aae077e4477ba9b3eb6054ff70f417de95cc40264834854734a79453e615d048da6f66b7ef46a6eb18

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/fQ:AEwVs+0jNDY1qi/qg

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks