Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-12-2024 01:30
General
-
Target
7eef1d1b4bd78efdfd8a2704ca47738ceab2df502337eea97a63532aeddb672bN.exe
-
Size
29KB
-
MD5
7846566e4cbeda1b051e31558e476a00
-
SHA1
fb92211e0581c1535eaacf187da30186f459834d
-
SHA256
7eef1d1b4bd78efdfd8a2704ca47738ceab2df502337eea97a63532aeddb672b
-
SHA512
5e5ca58f85f48d752fca87d6d972753645291c1d6b5b97d964cd6f27066a9c04513f3fde6da881bbe73ddf8ac4d54187257438f6ef264d773a54227925dadbef
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/shQ:AEwVs+0jNDY1qi/qUm
Malware Config
Signatures
-
Detects MyDoom family 8 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7eef1d1b4bd78efdfd8a2704ca47738ceab2df502337eea97a63532aeddb672bN.exe"C:\Users\Admin\AppData\Local\Temp\7eef1d1b4bd78efdfd8a2704ca47738ceab2df502337eea97a63532aeddb672bN.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
308B
MD55243568476eb2052b2f3b67dc9053e86
SHA1b126aa6506772f9024b76580bdf28b45e3a7f051
SHA2562d458622dc76eb87e44cc7db89309efdf50f99821145ae86864fd1b714cbaa80
SHA5123c68cef4e3daa4bca6e8b3aa5a31874be1e4dec38fe9781c6fe4890980744527d0c6818eeb519f8e6b322118e1f08302d85972fa7da4ba8be9421aabf9a77833
-
Filesize
29KB
MD5641143b89abe287e3abebed5f85467d7
SHA134bab0b4bee7cff0810f5b9204985fab3f73c050
SHA2561ca95e15e2ff4af1b2e3ea49992d7418b6594e4c63e02164b668e3d418baf114
SHA512266842f94fb817e15848da62c9acd32804af2b9d201dbec4aae853e4d5069269172010f91988e06f53a859a813c050a044e17d12cf5d40af49e68694d6e78e11
-
Filesize
320B
MD5c807406e2d1bf3857965aeba7b514fb4
SHA1fe550b689b10f697e21407ccbfe49d18ebf1f95c
SHA256e19bc875503ddedfc3f8bdd0fe9855bdfa7cf0d363133e12630a53b0cf7fa06a
SHA512162a350d42b57049c28148805ee22ba63f70ab2bb01aa8ccb5c90ff9147ed0d91747e5575a3ee691c555fe6cb89b0f31d0c6e29a961e3b2e77c5a32e3e3a5a7b
-
Filesize
320B
MD5fd66593834878453bd4e1b740ed97998
SHA1c5eb16302cfbf11efa3234a2a7e9dbea5cfdd879
SHA25606a889e70229d8c149b640c2ccf5cb7d3b1a18c3b2eca812c6aa1dc61e523218
SHA5129ef78fef0fd7d761157fec93322f2e0d9cb8f64a79cdf6da199e50fbbebf188b54116af3bcc1120b0674f3ccbdee4e206347f5ef14a0f1b7e91554fe2f038df4
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB