Overview

overview

10

Static

static

5

59d4810cab...86.exe

windows7-x64

10

59d4810cab...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59d4810cab263732dd6f9f8d1f2e0b778e87418c072f0162f57c8fee8cbd1c86.exe

  • Size

    29KB

  • Sample

    241226-lbrrhaslam

  • MD5

    955eca37a031c87bbac7c669507f47d0

  • SHA1

    6e97a57bb94a300cd6d3c39d86cee2124729a1eb

  • SHA256

    59d4810cab263732dd6f9f8d1f2e0b778e87418c072f0162f57c8fee8cbd1c86

  • SHA512

    3fafeee80445d170c3057e833cc798aa4f8b597d9bd23111053ba27670b8c7f0fcdc38ed2b4330f258f1152a8ce870708167881f34683ad5f6f73a1cc92472a0

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/hhg:AEwVs+0jNDY1qi/qJi

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      59d4810cab263732dd6f9f8d1f2e0b778e87418c072f0162f57c8fee8cbd1c86.exe

    • Size

      29KB

    • MD5

      955eca37a031c87bbac7c669507f47d0

    • SHA1

      6e97a57bb94a300cd6d3c39d86cee2124729a1eb

    • SHA256

      59d4810cab263732dd6f9f8d1f2e0b778e87418c072f0162f57c8fee8cbd1c86

    • SHA512

      3fafeee80445d170c3057e833cc798aa4f8b597d9bd23111053ba27670b8c7f0fcdc38ed2b4330f258f1152a8ce870708167881f34683ad5f6f73a1cc92472a0

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/hhg:AEwVs+0jNDY1qi/qJi

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks