Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-01-2025 08:55
General
-
Target
e5788063b40ac16da97c58306610999bdc94abfbdfa0ea7b2b0940412fe97fb3.exe
-
Size
29KB
-
MD5
ad2f00822f963303c3e8b5c403b2d083
-
SHA1
3c692e1309adb60b049661326d9e5cf09c496739
-
SHA256
e5788063b40ac16da97c58306610999bdc94abfbdfa0ea7b2b0940412fe97fb3
-
SHA512
7b24b53b7b22b8d8bcfc6a6e8309dd42a1ae8bd1ca48385160fecd031395d462faf7c11740962443ba3735193be1c21f648ca38516704cabc68192243f829b22
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/qhT:AEwVs+0jNDY1qi/qih
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e5788063b40ac16da97c58306610999bdc94abfbdfa0ea7b2b0940412fe97fb3.exe"C:\Users\Admin\AppData\Local\Temp\e5788063b40ac16da97c58306610999bdc94abfbdfa0ea7b2b0940412fe97fb3.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
313B
MD5ffb72ab4faba49ad441ce07db37dd8b6
SHA1194e13c1c32ebb6e7a1dc912261cbd58a82ff71e
SHA2567bd7c3676e98ddde8e0d5b63dd22cb9379d975bcd1d68884c97565cdd8d03660
SHA512517be20d2442489ce39b48dc7f9f6f13f8c45d02703fb1865071f553d36b2289f5abc26c6089fc0bfad1a41fe318bf4b5a806915c5e45898ac744b7e4ed30257
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
305B
MD528d3586cf0fecdada411e6598d0d24b9
SHA187f72f1d3f9eb8682c25d9ffc0397064489903ff
SHA2563f9df02aa51466baf3b4089857c0c9f84b40e8506a4322f3836ce2b995552593
SHA51241e79f5946cbf77ec84555acb9cffecaeada064855c41a46b56c3102f0fb406a627d84347ac14a74768db87e93e68ca534887a32d4cf220e013ce24bfdfab0cc
-
Filesize
29KB
MD58c21f389dfd342e0a2b2874728325d45
SHA1a319d70441fb3e14df22d374b3aa4c763f8a8a26
SHA256505a0414357a9093843550f6fc94b60a5b760ccfa01ef8bb3e87f981bf40f37f
SHA512f750292508b6ceeae628fa333dcfe3237bd4498f8cab7200b0e457d6e85509470ba22b625ceb764d9bfae6c9eec06dec6bf03688b75ee48033f78bd53b1173dc
-
Filesize
320B
MD55eb2149d9722361c0431eb757d7b11e2
SHA141395a11437f94a4ea547f4f07eda4e4d574e2ec
SHA2564cd17e14fe8a9f7b52b65261c2bc9dd85783b1e554baeb9ea1e260588862b1f6
SHA51257c0c4cba0a547e54a24974bddc4542e98a37dc92be7e5b981733b6cfd4f42413146a1229392ee3f1608630394c3c7d825046c0f2dd7eb37217ab6d57c9c6f55
-
Filesize
320B
MD5ba3fa3ce53c6109230af09cfe06c8a59
SHA1c53bb416b8aa30f5d72d143831037526e646017e
SHA2569b19881e7676af4c8e8899ecbf42b13d3710f4d52d1e18d9ee886fe80ca70079
SHA512db5dfc426a1829590f78abee89f59d23d91199acb662f9e854c4ecae9603f8886de2e197738edd56533e793f28fac6f6460da765575ce4b47fb9dd932be35336
-
Filesize
320B
MD5c62dde7b63a1829db7fec057f6a9e34a
SHA162e20d29109dd36038af998f9bc3601570dc285a
SHA256badb4843bead6fb06539d36c7236e295b2eff96ccadb60d9eee795a57f168fe9
SHA512853732274a8949e857e1c40702b06d272f32213dd87ad7897e95976511b5c4b27873164a5e3dbdcca346a4d60b0799b10d24f56fa8ff5050e8d0889baa30313e
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB