Overview

overview

10

Static

static

5

be264b4f73...3f.exe

windows7-x64

10

be264b4f73...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be264b4f73e8c0a4b91e2e7651c580ad79f774918cd9e63f9e00a61b7631c23f.exe

  • Size

    29KB

  • Sample

    241231-fnsaxaynhz

  • MD5

    44471ae0142b94490b75f3b321f7a2c7

  • SHA1

    812535314bc6334727c293937c2c81c664ec3555

  • SHA256

    be264b4f73e8c0a4b91e2e7651c580ad79f774918cd9e63f9e00a61b7631c23f

  • SHA512

    7f0013653710a92e8b29d6c6e1d651a795c4075767fccf44128c86f54c007eb7693c8b78fd288aff25a6412fff3f6b9ed6c4b53df93502b00904765d6ccf7d0d

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/dh5:AEwVs+0jNDY1qi/q1j

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      be264b4f73e8c0a4b91e2e7651c580ad79f774918cd9e63f9e00a61b7631c23f.exe

    • Size

      29KB

    • MD5

      44471ae0142b94490b75f3b321f7a2c7

    • SHA1

      812535314bc6334727c293937c2c81c664ec3555

    • SHA256

      be264b4f73e8c0a4b91e2e7651c580ad79f774918cd9e63f9e00a61b7631c23f

    • SHA512

      7f0013653710a92e8b29d6c6e1d651a795c4075767fccf44128c86f54c007eb7693c8b78fd288aff25a6412fff3f6b9ed6c4b53df93502b00904765d6ccf7d0d

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/dh5:AEwVs+0jNDY1qi/q1j

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks