Overview

overview

10

Static

static

5

027c3d13bd...81.exe

windows7-x64

10

027c3d13bd...81.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    027c3d13bd5381fff17ad6d43b5b7d6b9d35c6dd4501a342520cb839fb0a5a81.exe

  • Size

    29KB

  • Sample

    241230-r3x1gszpat

  • MD5

    3fca3af6921ad52fc013177775820581

  • SHA1

    8f0e7503a7a7cd3f1e4a207acc5ae489174355b7

  • SHA256

    027c3d13bd5381fff17ad6d43b5b7d6b9d35c6dd4501a342520cb839fb0a5a81

  • SHA512

    552f11ed8204f164726700695aa97cc1f6103c40d422f92228e380567e5b210c1953f129b908167c4e2221d2da6f237c95d7b766e7bc4f64ada309c19c392379

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zhs:AEwVs+0jNDY1qi/q7+

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      027c3d13bd5381fff17ad6d43b5b7d6b9d35c6dd4501a342520cb839fb0a5a81.exe

    • Size

      29KB

    • MD5

      3fca3af6921ad52fc013177775820581

    • SHA1

      8f0e7503a7a7cd3f1e4a207acc5ae489174355b7

    • SHA256

      027c3d13bd5381fff17ad6d43b5b7d6b9d35c6dd4501a342520cb839fb0a5a81

    • SHA512

      552f11ed8204f164726700695aa97cc1f6103c40d422f92228e380567e5b210c1953f129b908167c4e2221d2da6f237c95d7b766e7bc4f64ada309c19c392379

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zhs:AEwVs+0jNDY1qi/q7+

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks