Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 08:25
General
-
Target
f571136b2fef1f1c555900fcd00f077156997d7cff388f81c3713ce9029908ce.exe
-
Size
28KB
-
MD5
6e393a9ed7907b38cb15d47b166fbf14
-
SHA1
e10f1e614220565696f2f6e21cf281125f894891
-
SHA256
f571136b2fef1f1c555900fcd00f077156997d7cff388f81c3713ce9029908ce
-
SHA512
6aba2c60409a167d325e51682ea211ff644e1f3497da0590d37a06a9a04668ef1c4a31e49bceb5cc4d1d559ee3649d245125f668749335a4ba214116ab62b0c0
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNk/:Dv8IRRdsxq1DjJcqf1/
Malware Config
Signatures
-
Detects MyDoom family 8 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f571136b2fef1f1c555900fcd00f077156997d7cff388f81c3713ce9029908ce.exe"C:\Users\Admin\AppData\Local\Temp\f571136b2fef1f1c555900fcd00f077156997d7cff388f81c3713ce9029908ce.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304B
MD5cde2c6ec81201bdd39579745c69d502f
SHA1e025748a7d4361b2803140ed0f0abda1797f5388
SHA256a81000fc443c3c99e0e653cca135e16747e63bccebd5052ed64d7ae6f63f227f
SHA512de5ca6169b2bb42a452ebd2f92c23bad3a98c01845a875336d6affe7f0192c2782b1f66f149019c0b880410c836fc45b2e9157dcccc7ad0d9e5953521a2151d4
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
142KB
MD5b5af554527a53cc1ca888a6f02bed673
SHA1d3c911e7c9c30dfc25560d8ebb2ee0072c9739c2
SHA2568010f5a342009967996901b75ec87b8d05bfa0e5e318bc1d040995a15024cb0d
SHA51203084d5923bb96c2035e0a32a871c4b47e7bc31715c17fcf1004901cb7c41a458ca9a0bf700aa4fffda1900bd813a641243b3c0b9a73fa82689e341bc6a80eea
-
Filesize
28KB
MD53bc6914087f429125f43e942a857e90d
SHA1b1298f12062485666e21f113b0bbac2429e40504
SHA25644ad4c975a2141a8b1589128dedb59d987b7cb8d2d83be932eee40d62dd4f1d1
SHA51284666555238f9764c5bf24070af2a92b6e63b1e6ea110fa5ba136887dd6d0c25b00ee24b33b29c246424d3920552d80d8edd2e0cfd290c74551be2b75d2da6f0
-
Filesize
1KB
MD5a699e3335e22a8903bac65ff4eb6d18d
SHA17c509ec6e84447426433dd99a20b9f2011b06031
SHA25693f03d34880f1c9ae12a6171ac9babd3a01a105ef020773bb53909bfa01c2572
SHA512dedd3b7358d0ce01e3548c4c09af43549a3d79e9138839a99d1c454848221e07e1c47421700dd2543dbef614344300c15d447f939e0035f36695627e7fcfb327
-
Filesize
1KB
MD56a9315b91ad98da2cf03dac946986287
SHA19f6b83392264902144954714a4735b85de2b2479
SHA256917afbd1a428984e7eb3a3b6fc0b49fc621db79ee737f2b9bd8fea65862ac568
SHA512bdc71122e157a3ca3d2877af7485dd8d7ce349c970727a48d3e770aef70d47f9ddc65e64678881516412fdd05c3801d9bb7ff00e217caded518503b2c4cecf46
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB