Overview

overview

10

Static

static

5

0577f64def...78.exe

windows7-x64

10

0577f64def...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0577f64defd0900282d7dc5e983414d4b202183fbd22ce2430714600ab0de478

  • Size

    29KB

  • Sample

    241220-yf9t4asna1

  • MD5

    e4c0f33384b8d465e5d385f6eb734139

  • SHA1

    31a7dd9746a370554f85489170e84949ae534500

  • SHA256

    0577f64defd0900282d7dc5e983414d4b202183fbd22ce2430714600ab0de478

  • SHA512

    ae899ca492430d983272a49042649a012ac77ee3bdc240614e760d8e401333c973aef2dd2e99b2de64643bc20025c37ad10c7b0e4ad8bd8a1aba3e99ca7d7558

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/4h:AEwVs+0jNDY1qi/qgh

Score
10/10
mydoommicrosoftdiscoverypersistencephishingproduct:outlookupxworm

Malware Config

Targets

    • Target

      0577f64defd0900282d7dc5e983414d4b202183fbd22ce2430714600ab0de478

    • Size

      29KB

    • MD5

      e4c0f33384b8d465e5d385f6eb734139

    • SHA1

      31a7dd9746a370554f85489170e84949ae534500

    • SHA256

      0577f64defd0900282d7dc5e983414d4b202183fbd22ce2430714600ab0de478

    • SHA512

      ae899ca492430d983272a49042649a012ac77ee3bdc240614e760d8e401333c973aef2dd2e99b2de64643bc20025c37ad10c7b0e4ad8bd8a1aba3e99ca7d7558

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/4h:AEwVs+0jNDY1qi/qgh

    Score
    10/10
    mydoomdiscoverypersistenceupxwormmicrosoftphishingproduct:outlook

    • Detected microsoft outlook phishing page

      phishingmicrosoftproduct:outlook

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks