Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-01-2025 00:09
General
-
Target
72cde64deb16eff7cc5e2c11a3cbb98ed80d2825cff62292de3804ea069ce2b6.exe
-
Size
29KB
-
MD5
35c62425fe1cc1526770ac6806fcf8c5
-
SHA1
29b2f6dd592db5a3c05578d6dc897bf35ca125e1
-
SHA256
72cde64deb16eff7cc5e2c11a3cbb98ed80d2825cff62292de3804ea069ce2b6
-
SHA512
c5e3efdc7f946ff62c54f71db51630e29473a25e04f2f0a0060f24c6f0fe77dd024957d1768dc3606205aa4d66e15fba8a8468855f919ed065ac961663606907
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/WhO:AEwVs+0jNDY1qi/q+U
Malware Config
Signatures
-
Detects MyDoom family 7 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\72cde64deb16eff7cc5e2c11a3cbb98ed80d2825cff62292de3804ea069ce2b6.exe"C:\Users\Admin\AppData\Local\Temp\72cde64deb16eff7cc5e2c11a3cbb98ed80d2825cff62292de3804ea069ce2b6.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
305B
MD5157431349a057954f4227efc1383ecad
SHA169ccc939e6b36aa1fabb96ad999540a5ab118c48
SHA2568553409a8a3813197c474a95d9ae35630e2a67f8e6f9f33b3f39ef4c78a8bfac
SHA5126405adcfa81b53980f448c489c1d13506d874d839925bffe5826479105cbf5ba194a7bdb93095585441c79c58de42f1dab1138b3d561011dc60f4b66d11e9284
-
Filesize
313B
MD5ffb72ab4faba49ad441ce07db37dd8b6
SHA1194e13c1c32ebb6e7a1dc912261cbd58a82ff71e
SHA2567bd7c3676e98ddde8e0d5b63dd22cb9379d975bcd1d68884c97565cdd8d03660
SHA512517be20d2442489ce39b48dc7f9f6f13f8c45d02703fb1865071f553d36b2289f5abc26c6089fc0bfad1a41fe318bf4b5a806915c5e45898ac744b7e4ed30257
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD525efddca9dadc776e64dbb32860c8661
SHA15402c74d3b9f4ee3d2766e7ac6dfab7c682cf5d8
SHA25650b488cd761b6dae2fceab754b76a4ec1aa4b0cec5e8003490dfe34fdc5adbf8
SHA512ff973b5587bee749844deaf1c510e24c39f7caaf668703220ce78e697811af40f25c8eb9770075ee5823e7fa9b65d564883d6a1733770ad9aa16337b96fd4b8e
-
Filesize
320B
MD55e4effe9a43007ce40a9f258a29e5485
SHA1f0ba9d43cb26335270ef3a0d3e0dd6183df79e02
SHA25622776cb8813b31345877983f470c5b9b9f3e66facc9e1615ff7826dc4c518ce7
SHA5126a75a415242ef1ea5abba850e6fa09240694cbf3e0d34e40ed15faea255387145d512d39b0e115b446ce3f8e5e0c91b6d57aa05b42e80a29f58c197689272d63
-
Filesize
320B
MD5a7bbd0822d773ff720704b938030304b
SHA1bcb4efa9f3d310f6de14f6836b50d1e1ceeac5c2
SHA256d924d1b06616c9abcf5ec0c8f946d21ba99663c5faf0a69665255a8fac7dd083
SHA51245ce354b56c3cbdff9587db9b4cc517db2ba1bc9de5ded996dc10e4ac11dd0386193cfa99ab87d29905dc4d5052298b333a6123cbda9db9d44c53ee3961e3a80
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB