Overview

overview

10

Static

static

5

5d44366bc3...7N.exe

windows7-x64

10

5d44366bc3...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d44366bc35b2f32687cddc9c6ef5fcd95ed1f7cf3f5a2f184698ea829db57a7N.exe

  • Size

    29KB

  • Sample

    241222-nwrcksxkgl

  • MD5

    fb0dfd15aae30edf3da6f15c93a4f030

  • SHA1

    4409eae6358d547e2cb097c5683786c1430dc6c4

  • SHA256

    5d44366bc35b2f32687cddc9c6ef5fcd95ed1f7cf3f5a2f184698ea829db57a7

  • SHA512

    ea3d1668774a8eb4c9694789500e2f2de884bac578ad6a5694ba362b1fbc2e5d2154567861853eed9c6d03ebc417d7d09b8d2afc06d175db78c2f1e566310402

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/ThA:AEwVs+0jNDY1qi/q7y

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      5d44366bc35b2f32687cddc9c6ef5fcd95ed1f7cf3f5a2f184698ea829db57a7N.exe

    • Size

      29KB

    • MD5

      fb0dfd15aae30edf3da6f15c93a4f030

    • SHA1

      4409eae6358d547e2cb097c5683786c1430dc6c4

    • SHA256

      5d44366bc35b2f32687cddc9c6ef5fcd95ed1f7cf3f5a2f184698ea829db57a7

    • SHA512

      ea3d1668774a8eb4c9694789500e2f2de884bac578ad6a5694ba362b1fbc2e5d2154567861853eed9c6d03ebc417d7d09b8d2afc06d175db78c2f1e566310402

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/ThA:AEwVs+0jNDY1qi/q7y

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks