mydoom | 6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3 | Triage

Submit
Reports

Overview

overview

Static

static

5

6bf8f95a81...3N.exe

windows7-x64

6bf8f95a81...3N.exe

windows10-2004-x64

Sharing

General

Target

6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3N.exe
Size

29KB
Sample

241220-d96z3szjcn
MD5

7b189d70a297a8885dee768568e1f070
SHA1

a0111056cc18d66084759db1eea4ecff46c828db
SHA256

6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3
SHA512

095c35ed02c368d3bda0398ad67c985f9da32f044343af5933a62da1dd20d9bf6f5de3e2cce056a8f6e6078c2272f5474627ee6c8ca47a37f5177d4ca4c7f355
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/auT:AEwVs+0jNDY1qi/qt

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3N.exe

Resource

win7-20240903-en

mydoom discovery persistence upx worm

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3N.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3N.exe
- Size
  
  29KB
- MD5
  
  7b189d70a297a8885dee768568e1f070
- SHA1
  
  a0111056cc18d66084759db1eea4ecff46c828db
- SHA256
  
  6bf8f95a8168ff03ab6e547a42c0d0719c071f4f9270a9625f8e54469b0300b3
- SHA512
  
  095c35ed02c368d3bda0398ad67c985f9da32f044343af5933a62da1dd20d9bf6f5de3e2cce056a8f6e6078c2272f5474627ee6c8ca47a37f5177d4ca4c7f355
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/auT:AEwVs+0jNDY1qi/qt
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy