Overview

overview

10

Static

static

5

a197e491d5...91.exe

windows7-x64

10

a197e491d5...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a197e491d5f8b9b95f72153a0522b3dc15accc0fccc022d1dc0cc9f750a98391.exe

  • Size

    29KB

  • Sample

    250101-afqt8awqdv

  • MD5

    7bd7b2734e864b04dc870a64b80ece95

  • SHA1

    c1c1447ce1e93e8aa1b3ecae7a2823e345c8e8da

  • SHA256

    a197e491d5f8b9b95f72153a0522b3dc15accc0fccc022d1dc0cc9f750a98391

  • SHA512

    6fea4b0ddeffa3dafbf44f5a8c332f2e28a01406e0aa351e92c237f999da0a160f66fc81d7f27fd679a9ebc7fa232ac2b95c6a9598d8c79f4ffd9614b225c002

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/ahP:AEwVs+0jNDY1qi/qSd

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      a197e491d5f8b9b95f72153a0522b3dc15accc0fccc022d1dc0cc9f750a98391.exe

    • Size

      29KB

    • MD5

      7bd7b2734e864b04dc870a64b80ece95

    • SHA1

      c1c1447ce1e93e8aa1b3ecae7a2823e345c8e8da

    • SHA256

      a197e491d5f8b9b95f72153a0522b3dc15accc0fccc022d1dc0cc9f750a98391

    • SHA512

      6fea4b0ddeffa3dafbf44f5a8c332f2e28a01406e0aa351e92c237f999da0a160f66fc81d7f27fd679a9ebc7fa232ac2b95c6a9598d8c79f4ffd9614b225c002

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/ahP:AEwVs+0jNDY1qi/qSd

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks