mydoom | cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93 | Triage

Submit
Reports

Overview

overview

Static

static

5

cabee3856c...93.exe

windows7-x64

cabee3856c...93.exe

windows10-2004-x64

Sharing

General

Target

cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93
Size

29KB
Sample

241229-epbtwaskbx
MD5

addf5e8b8a2d6c8dadc842776a0b9136
SHA1

62ba30d252e8270e44559d915ac50f1bc7292f74
SHA256

cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93
SHA512

835f3f3d7a9054e14749ae32751804c4c6c4040f5c00093c4a3282e8ca2b2c908d4ac527656bae35af6bad68d15c8fb377e4ed1e402dc8a8c1438e12204248c6
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zh3:AEwVs+0jNDY1qi/qLV

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93.exe

Resource

win7-20240903-en

mydoom discovery persistence upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93
- Size
  
  29KB
- MD5
  
  addf5e8b8a2d6c8dadc842776a0b9136
- SHA1
  
  62ba30d252e8270e44559d915ac50f1bc7292f74
- SHA256
  
  cabee3856c639a163bbfb28885bcb94d362bbe9ae7a9ceacbf296030aa0d3b93
- SHA512
  
  835f3f3d7a9054e14749ae32751804c4c6c4040f5c00093c4a3282e8ca2b2c908d4ac527656bae35af6bad68d15c8fb377e4ed1e402dc8a8c1438e12204248c6
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zh3:AEwVs+0jNDY1qi/qLV
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2024

Terms | Privacy