Overview

overview

10

Static

static

5

bd50c100be...12.exe

windows7-x64

10

bd50c100be...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd50c100bef185ed053f58a5b033940ea1d518f9e1407d2c464deb48dede1612.exe

  • Size

    29KB

  • Sample

    250107-m1bl9azmgq

  • MD5

    d1a5f12298d1682af0e56150e3e6c516

  • SHA1

    0284f8caae6c8923efe80e31efd2d3cdf75643d4

  • SHA256

    bd50c100bef185ed053f58a5b033940ea1d518f9e1407d2c464deb48dede1612

  • SHA512

    06bd6f58d19cb7f5ed81e91710a5d0ba6e3f63c91d0a0645b1bfc12c363fab40ce8e4b183f415e392a0ff64bc6262a2a8f6de50ffb93da7304854264d886a924

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/MhA:AEwVs+0jNDY1qi/qES

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      bd50c100bef185ed053f58a5b033940ea1d518f9e1407d2c464deb48dede1612.exe

    • Size

      29KB

    • MD5

      d1a5f12298d1682af0e56150e3e6c516

    • SHA1

      0284f8caae6c8923efe80e31efd2d3cdf75643d4

    • SHA256

      bd50c100bef185ed053f58a5b033940ea1d518f9e1407d2c464deb48dede1612

    • SHA512

      06bd6f58d19cb7f5ed81e91710a5d0ba6e3f63c91d0a0645b1bfc12c363fab40ce8e4b183f415e392a0ff64bc6262a2a8f6de50ffb93da7304854264d886a924

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/MhA:AEwVs+0jNDY1qi/qES

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks