Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-12-2024 04:07
General
-
Target
22282981d2402cb2212d8e6968d1cf04e5fc5bdf675cdaf744a9cb109612e175.exe
-
Size
29KB
-
MD5
dd394ae8e0cf6cf238c4c19affca6308
-
SHA1
089898bae1e51c162dc6297f54e299a50c0cafbb
-
SHA256
22282981d2402cb2212d8e6968d1cf04e5fc5bdf675cdaf744a9cb109612e175
-
SHA512
526690586116fc69b82567fb91b38a130957a83f1353bf5dfd95c5eedcd96106f332f44cd88665ae48f83da4a87c27161c0693835f1da2669d91290621030b7d
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/T2:AEwVs+0jNDY1qi/qa
Malware Config
Signatures
-
Detects MyDoom family 8 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\22282981d2402cb2212d8e6968d1cf04e5fc5bdf675cdaf744a9cb109612e175.exe"C:\Users\Admin\AppData\Local\Temp\22282981d2402cb2212d8e6968d1cf04e5fc5bdf675cdaf744a9cb109612e175.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304B
MD5267ddfdbb8d492b25de208d84b290f1c
SHA19f57d9f19f25549e1232489a0c101a92e851de2f
SHA256ef1f87447ae1ab45548d2934cf0dbd15a32b86359ff9fccfa48d76c1badf6586
SHA5120709aa62d39d419d335183235dcf328e1dfe6997bd9bfbdeb01bb050df8dcab63ec2d4f46e4718ab389fa8e12af66dec2e3019c8871ac6e40927a25cb706c6b3
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
305B
MD532bebbd769b4d92e90eb2630815ab675
SHA1979095b7b8c81973a36be40187d14525973ca82f
SHA256109d8ca823dca724c4f32557a8057783a6fb755d67fc74cf9df004731c7c432b
SHA512784363cc3b020815ea603f60cf6478b4f973847f014f425f33012983209db48e2ef36a1a933b74adc644a4c1f8525a1cedd18682a18ff399187163b7706e50d5
-
Filesize
29KB
MD52f4b9261f3d47a50633e4896411b5afe
SHA140c9fa0651c609121e858137a044af07b39a10e4
SHA256528f3e140a8d51e050ff0621a8ab9596df25e746702584b653e6b0ca836123c9
SHA512f580bc741e9b6d74b285d50fa4c2a6042e4d57a3a40afa5c66d3e94f0a8e060981c04b2744d27029e4f2e0429d92e32e3e2e71fcb3050153255000436b28d623
-
Filesize
384B
MD556dca978b433781c0ad2e82273ac96f8
SHA1d7d8f25fc90b78424b7f7781a090c476a2abfff7
SHA256e6fed22cc9927c9e3e330b5e398973aec38d1dcc789494cd78bb98910b947655
SHA5124e143b75cf09cf7afd1b62cd8244ec963a7d82e5719e0511be49ab0e27ba6484d85c0fb1cdb1abbaca0102305126220424c09eb5b579ba1abc28c0d92920e33e
-
Filesize
384B
MD55747bc7e56572101951c7c559d4c07cb
SHA1d6740c97ef797b5a963d24c2039b55a7b5f3cfc9
SHA256aae948f076e342b03c5e0aa9911ad6e08d1ee7a65d807fd96848c7cc0ee0130f
SHA512b6e41e7d1f244f281aef4a240b66e3c84084511cc198f9d3bf286616a280f4bafa6e7de85e0f428c5b1cd2603bbb0d2975545f12ef72818509e15e24665bc266
-
Filesize
384B
MD5e749f42c045c163b796426bab7614512
SHA12616a49b4d85c95fb8944ead0b4b54a7ac46f539
SHA2560122c95580a3d2b2dac51dd65b06d09fe0ad17584e27fe51fc994fe165cc8fec
SHA5126044b88ad835bc7852432918e66a72e156521fbc76e21a4e96dbce45d4cf15cb9915ec9dba1e20ee6de45ac2e1f396b9769723491ae78b33686b02c06257e4dc
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB