Overview

overview

10

Static

static

10

dwmmoowmbkz.exe

windows7-x64

10

dwmmoowmbkz.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_69bd55618cab31aa8bac91bb83e66270

  • Size

    51KB

  • Sample

    250103-c64j4syqdl

  • MD5

    69bd55618cab31aa8bac91bb83e66270

  • SHA1

    9534933f89f18d0be30054149d6d1df78b6cb72d

  • SHA256

    b84f9d4d94d907e47b84beff70d6be166bb7bffd774d3c7152da0becd728389f

  • SHA512

    8051fec1f69f7ce1d54996b193bd973c07131939b78094fd55492324410da58546053531e1d7267ccc8b8eb8943a4c2db924468ff8560feb437cf6161bef865a

  • SSDEEP

    1536:fe8SMuDd+fK3F6Xs6XdodKA7Dk/Ht0fantpj7P:feRrAVAPkisHT

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      dwmmoowmbkz.exe

    • Size

      51KB

    • MD5

      f217b9268597022851016736519f50c6

    • SHA1

      ea10562fbb5232d6a39a1c7c021f3820281f606b

    • SHA256

      f92908b7940b96d47a62a404a08828aae33a44674ed98124db287d18da54dff4

    • SHA512

      06b2b2dd58ad8a4bdd14655fdb6c3a05ca5fa25543bd455d3122398f9eccf4c8580b23f934d19378fbc82a86bf4886577f3144ce498888dd416a096ae16a6f8b

    • SSDEEP

      1536:ae8SMuDd+fK3F6Xs6XdodKA7Dk/Ht0fantpj7B:aeRrAVAPkisHN

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks