Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-12-2024 01:49
General
-
Target
b19cbf1df784f42b66c841c304b7cdc6ab6eb1bfee10122de2ccf834c783a317.exe
-
Size
29KB
-
MD5
a3f2d945aaf22d67b3996febcdffbb23
-
SHA1
062ebdc9c3a6c2a95d5176c997d3bab10e8e761a
-
SHA256
b19cbf1df784f42b66c841c304b7cdc6ab6eb1bfee10122de2ccf834c783a317
-
SHA512
22ad4dd120e8436552c07a68bfa65a5efd7716fb370d0140d4936d890bd747771131a0b8725b6a7acbbeff1ee2c8363c9baffb609a351cca33e896a3e8f807a1
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/ohD:AEwVs+0jNDY1qi/qgR
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b19cbf1df784f42b66c841c304b7cdc6ab6eb1bfee10122de2ccf834c783a317.exe"C:\Users\Admin\AppData\Local\Temp\b19cbf1df784f42b66c841c304b7cdc6ab6eb1bfee10122de2ccf834c783a317.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
162KB
MD508aefffe0819c4bf2a5c379ae51a96a1
SHA1df853f4e5bb0dfc2c2f0122deab4b10a4e6b7e4d
SHA2562d2aa99956e7f07d32e4b653d551dc3bface7a508122ee4467547ef43538f069
SHA512651794ba8b94042ac619cb2a905337e49a73c24d7562f667f494a1d07e6842aea25800037224d3324bd2f0903a76e7cd8f60bb265be04fac1acf77f6ac0c324d
-
Filesize
29KB
MD5ce798b6b47ae7143a226c176ced3184d
SHA15c5cdefea3ef86b28a1dceb62e435208d552787d
SHA2569906240d569f593fb2a96315b5f3313b6adbfab23c15e886fb8869633d06b2f9
SHA512ebb0ded0a8eecd36b63fcac6ac28d77c40e4d398e174830a04fbdb841437271853e3f32f7af75c6d5f93fd2c588469f6d5ffc18592e7a00ab0b0354bd088feec
-
Filesize
320B
MD5121f915ba830467d5c8ca2e99fa0108a
SHA16c6676d6caa8d8cc5e3a860d95d6c2f996124e1b
SHA2560ae3d96361bc3bccc954addcb08f5bbad7df0b9cda421c6b4a496f0c553ea15f
SHA5122964de1d9060ebc14c746d16e51d4f1c6f6ef2d03b1696466c3c6a5103815016ac45a013c5fd154ed2e0a67ca2a2d5d40c06332a37c3fb80d9527fd09c87ff20
-
Filesize
320B
MD58d79b5d2f68997eb1b6c4eb8d7903681
SHA109dd8adb5a5c68d3b97ed7c51beccd573fbd7797
SHA256abe60fd789d8add77c931cbe4c04c02f1fc9cd691a61c305f2e180d2acf9bcaf
SHA512ef12cff0ff8c46488e217d36b8e185b9d25133bafe5c5924aaeb9c6706fb3c16a5230c4c2a9e20225a91ed8b76af135914c29926d6c34397f6739f8f467c07b3
-
Filesize
320B
MD5041d564bb9a0fb68c15dd7c60bdee242
SHA17e4c9ce654af5c6d190158fccc881e74f203bcca
SHA2568c32de93a45c4cdfc331865e1bc886d8e31bb0582a274dd9ec3bb31a5dd09eb3
SHA512411372b618acf4fbef844adb943f5de7caa1e9d6cd1206b04ad07a2bf8cec0dfa310c8f7d23e424af79a51c9fd18484acebee016eead0760be189700a8ba62f5
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB