mydoom | d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4a | Triage

Submit
Reports

Overview

overview

Static

static

d8b072e211...aN.exe

windows7-x64

d8b072e211...aN.exe

windows10-2004-x64

Sharing

General

Target

d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4aN.exe
Size

37KB
Sample

241217-a9skxavqas
MD5

0cd8c990d3d12dc6f03dc9b53ff50bf0
SHA1

897cdd56acffdb40bb4025256f85be761a0c0ff0
SHA256

d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4a
SHA512

ab6f8b80b03d74d85d309bb5287fbf80c36671bbdf947338694fa145934abf3d4b2975ba635936ad3516fbd8dc92ab15ce4a042b00f2e9e4d4899a71dbe61e46
SSDEEP

768:eEU07c92/EyTAYtxqfGNC0klI7C8yOvi3eOrjs:eg7wc1aGNC0klI7CPN3vns

Score

10^/10

mydoom discovery persistence worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4aN.exe

Resource

win7-20240903-en

mydoom discovery persistence worm

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4aN.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence worm

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4aN.exe
- Size
  
  37KB
- MD5
  
  0cd8c990d3d12dc6f03dc9b53ff50bf0
- SHA1
  
  897cdd56acffdb40bb4025256f85be761a0c0ff0
- SHA256
  
  d8b072e2117ee2165b02578501bf680003ed28ba175a376463e1812cd7156f4a
- SHA512
  
  ab6f8b80b03d74d85d309bb5287fbf80c36671bbdf947338694fa145934abf3d4b2975ba635936ad3516fbd8dc92ab15ce4a042b00f2e9e4d4899a71dbe61e46
- SSDEEP
  
  768:eEU07c92/EyTAYtxqfGNC0klI7C8yOvi3eOrjs:eg7wc1aGNC0klI7CPN3vns
Score

10^/10

mydoom discovery persistence worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceworm

behavioral2

mydoomdiscoverypersistenceworm

© 2018-2024

Terms | Privacy