mydoom | b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec | Triage

Submit
Reports

Overview

overview

Static

static

5

b5a491a73c...ec.exe

windows7-x64

b5a491a73c...ec.exe

windows10-2004-x64

Sharing

General

Target

b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec.exe
Size

29KB
Sample

241225-xjc4vstjhj
MD5

b50ec30a22302a4c2fa1a9ce2c21b045
SHA1

911ab0f8f2878cf90ff5e55daa7c7bad479ee312
SHA256

b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec
SHA512

a1eeebb061d3d2e3ed6f2dd24614ba69e8d51c1eebb265b96bde19cdd0a14934c96e5206e829b4883f496aa52d5bd9e02dc2d9b4bd9f0f8a8de24eb7da12c5cf
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/EhZ:AEwVs+0jNDY1qi/q8D

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec.exe

Resource

win7-20240903-en

mydoom discovery persistence upx worm

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec.exe
- Size
  
  29KB
- MD5
  
  b50ec30a22302a4c2fa1a9ce2c21b045
- SHA1
  
  911ab0f8f2878cf90ff5e55daa7c7bad479ee312
- SHA256
  
  b5a491a73cb47e0815b8843bf87a09a80538ccd0f5c946fbb7469814053877ec
- SHA512
  
  a1eeebb061d3d2e3ed6f2dd24614ba69e8d51c1eebb265b96bde19cdd0a14934c96e5206e829b4883f496aa52d5bd9e02dc2d9b4bd9f0f8a8de24eb7da12c5cf
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/EhZ:AEwVs+0jNDY1qi/q8D
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy