Overview

overview

10

Static

static

5

da63195f99...3c.exe

windows7-x64

10

da63195f99...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da63195f995260d1dfd9d82abc3e6d776413acc781ffed13cb75cd2c74abf13c.exe

  • Size

    29KB

  • Sample

    241225-wg567a1khx

  • MD5

    4d3b438ddd7c2e52ebb104fd1e9bc7a9

  • SHA1

    2b79867005ead32a07fe06a7a7c3afa8a9908c04

  • SHA256

    da63195f995260d1dfd9d82abc3e6d776413acc781ffed13cb75cd2c74abf13c

  • SHA512

    585b24f7f498b2f5d807158b33eac03c7d11c04ee9e2b8d3a9e6ca6403474f24d06fc6dce1f511a7e3bbf00dcb3b5d7e85e5ee37deb23cb0d48a6fe243d3d75f

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/mhD:AEwVs+0jNDY1qi/qeR

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      da63195f995260d1dfd9d82abc3e6d776413acc781ffed13cb75cd2c74abf13c.exe

    • Size

      29KB

    • MD5

      4d3b438ddd7c2e52ebb104fd1e9bc7a9

    • SHA1

      2b79867005ead32a07fe06a7a7c3afa8a9908c04

    • SHA256

      da63195f995260d1dfd9d82abc3e6d776413acc781ffed13cb75cd2c74abf13c

    • SHA512

      585b24f7f498b2f5d807158b33eac03c7d11c04ee9e2b8d3a9e6ca6403474f24d06fc6dce1f511a7e3bbf00dcb3b5d7e85e5ee37deb23cb0d48a6fe243d3d75f

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/mhD:AEwVs+0jNDY1qi/qeR

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks