Overview

overview

10

Static

static

5

a11dc3a41d...80.exe

windows7-x64

10

a11dc3a41d...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a11dc3a41d049dbf9a78035ea233a4535c8980a4fecc983e5050e35f4785f580.exe

  • Size

    29KB

  • Sample

    241225-tgx5gaxnaw

  • MD5

    349460e7e92d3da76a0e962ea014af26

  • SHA1

    4d05d5a2d99625ee6ebccb5729512cefd4171bfd

  • SHA256

    a11dc3a41d049dbf9a78035ea233a4535c8980a4fecc983e5050e35f4785f580

  • SHA512

    180b9fd2d01bcef73da812fed15a573817462a8e1437b73e87d4ac6f3f0faedf9b1f5d1def05ab024ed18ec1b84e3057ff2028eb33cdc6c629adc3c1d1ee0b09

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/PhF:AEwVs+0jNDY1qi/qnf

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      a11dc3a41d049dbf9a78035ea233a4535c8980a4fecc983e5050e35f4785f580.exe

    • Size

      29KB

    • MD5

      349460e7e92d3da76a0e962ea014af26

    • SHA1

      4d05d5a2d99625ee6ebccb5729512cefd4171bfd

    • SHA256

      a11dc3a41d049dbf9a78035ea233a4535c8980a4fecc983e5050e35f4785f580

    • SHA512

      180b9fd2d01bcef73da812fed15a573817462a8e1437b73e87d4ac6f3f0faedf9b1f5d1def05ab024ed18ec1b84e3057ff2028eb33cdc6c629adc3c1d1ee0b09

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/PhF:AEwVs+0jNDY1qi/qnf

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks