Overview

overview

10

Static

static

10

dfa655a237...cf.exe

windows7-x64

10

dfa655a237...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfa655a23709a07d554a95fee8a4e22f6bb509cd0677817bf467abdbc5e7a2cf.exe

  • Size

    56KB

  • Sample

    241218-arbjnswkdl

  • MD5

    1f8430344aa2475d3ac852db036debf0

  • SHA1

    546d413f645afd16283e53eb1260c10d2ed5863e

  • SHA256

    dfa655a23709a07d554a95fee8a4e22f6bb509cd0677817bf467abdbc5e7a2cf

  • SHA512

    fdf76c9d2a75910ae62c940d4b6c97c1b4e26d15f10fa325a660a7f1f96c5d1284ae5c7bc7cf48c3207c1e8d9f02fe10ed7b13f13af5aff94746d29e2978b5ba

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfTH0KoBVjf:aqk/Zdic/qjh8MJDH++vCVKiZf

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      dfa655a23709a07d554a95fee8a4e22f6bb509cd0677817bf467abdbc5e7a2cf.exe

    • Size

      56KB

    • MD5

      1f8430344aa2475d3ac852db036debf0

    • SHA1

      546d413f645afd16283e53eb1260c10d2ed5863e

    • SHA256

      dfa655a23709a07d554a95fee8a4e22f6bb509cd0677817bf467abdbc5e7a2cf

    • SHA512

      fdf76c9d2a75910ae62c940d4b6c97c1b4e26d15f10fa325a660a7f1f96c5d1284ae5c7bc7cf48c3207c1e8d9f02fe10ed7b13f13af5aff94746d29e2978b5ba

    • SSDEEP

      768:aq9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfTH0KoBVjf:aqk/Zdic/qjh8MJDH++vCVKiZf

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks