Overview

overview

10

Static

static

5

1bc3fffd7f...25.exe

windows7-x64

10

1bc3fffd7f...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bc3fffd7f3640209a216f40a9e477b5c7446e18e654f327c8010ab1b418c325

  • Size

    29KB

  • Sample

    250104-zbp5kaxqgn

  • MD5

    7ee8a261df0dc3cfab87600ccad32148

  • SHA1

    aac9986819b3404b13c5737e09ff2e2d5e884c4d

  • SHA256

    1bc3fffd7f3640209a216f40a9e477b5c7446e18e654f327c8010ab1b418c325

  • SHA512

    2dfdcffc39a9128e1ce7644927edc7eac7eceafa1308daa1c8a1601b05c5b655d0afb7b1c3fb3912ceb14f79996045c251fa8e5461dcbc92f6628d2c8da08eb7

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/chp:AEwVs+0jNDY1qi/q0T

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      1bc3fffd7f3640209a216f40a9e477b5c7446e18e654f327c8010ab1b418c325

    • Size

      29KB

    • MD5

      7ee8a261df0dc3cfab87600ccad32148

    • SHA1

      aac9986819b3404b13c5737e09ff2e2d5e884c4d

    • SHA256

      1bc3fffd7f3640209a216f40a9e477b5c7446e18e654f327c8010ab1b418c325

    • SHA512

      2dfdcffc39a9128e1ce7644927edc7eac7eceafa1308daa1c8a1601b05c5b655d0afb7b1c3fb3912ceb14f79996045c251fa8e5461dcbc92f6628d2c8da08eb7

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/chp:AEwVs+0jNDY1qi/q0T

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks