mydoom | e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34 | Triage

Submit
Reports

Overview

overview

Static

static

e4b7e8dcfb...34.exe

windows7-x64

e4b7e8dcfb...34.exe

windows10-2004-x64

Sharing

General

Target

e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
Size

47KB
Sample

241216-en9dratkbt
MD5

c794da55f0366d8e2504c154ef416ed5
SHA1

1536e3e92f78854d3184fced6eeb740c7877959b
SHA256

e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
SHA512

618dcdd603a0b0ab9b6a56ecff5496f8e77a6fc6f5cf30e571f23fa4a7477cbbe2546a7926fcc4e270bc3755c7a2612d29df19bff0875c187586101b965d3cd8
SSDEEP

768:eEU07c92/EyTAYtxqfGNC0klI7C8yOvi3egdNO74No5rVGIpLh:eg7wc1aGNC0klI7CPN3vxuRLh

Score

10^/10

mydoom discovery persistence worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34.exe

Resource

win7-20240903-en

mydoom discovery persistence worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
- Size
  
  47KB
- MD5
  
  c794da55f0366d8e2504c154ef416ed5
- SHA1
  
  1536e3e92f78854d3184fced6eeb740c7877959b
- SHA256
  
  e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
- SHA512
  
  618dcdd603a0b0ab9b6a56ecff5496f8e77a6fc6f5cf30e571f23fa4a7477cbbe2546a7926fcc4e270bc3755c7a2612d29df19bff0875c187586101b965d3cd8
- SSDEEP
  
  768:eEU07c92/EyTAYtxqfGNC0klI7C8yOvi3egdNO74No5rVGIpLh:eg7wc1aGNC0klI7CPN3vxuRLh
Score

10^/10

mydoom discovery persistence worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceworm

behavioral2

mydoomdiscoverypersistenceworm

© 2018-2024

Terms | Privacy