Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-01-2025 23:25
General
-
Target
477258e986d1174b68c95581a04bbe0bfbf6d5af25f68a9c564c0153e36617dc.exe
-
Size
29KB
-
MD5
9e0682c813a6894997a6e8b9edc84335
-
SHA1
7cf3e18e6b330e2188dbc9e57a2e5af30a54a8b9
-
SHA256
477258e986d1174b68c95581a04bbe0bfbf6d5af25f68a9c564c0153e36617dc
-
SHA512
270a1b4205bb36f4695d6fa842316925cd08afa2320cf81df287aaf6476b3de832c294fb06538630a292c465bd5acb8c467ebffdb1db16f95add6204b05a822c
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/rhX:AEwVs+0jNDY1qi/qj1
Malware Config
Signatures
-
Detects MyDoom family 6 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\477258e986d1174b68c95581a04bbe0bfbf6d5af25f68a9c564c0153e36617dc.exe"C:\Users\Admin\AppData\Local\Temp\477258e986d1174b68c95581a04bbe0bfbf6d5af25f68a9c564c0153e36617dc.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD55159ff8dc270016aab094ea46e718dfb
SHA12b5eac89aa6b1903572c233242af47fb2b192d5c
SHA2569fb2493ca855082ad7505b9ad7a1563f028fad34a4dd4151b7fec8ebe7396c03
SHA51272ddbd8242757ae3414c31304477acd54456af8990f9a07569909e53d7084036e5ebbda5c5f05b774606b7f1de9115f22146ced53bed44e61dfe0cdc536d65e1
-
Filesize
29KB
MD50f799d821b702706ef05a798133db749
SHA1da76ae20ec7d9dbc9661df1f19cf21477439755a
SHA256c4a7377df24c302d2432482bc4b9678add6741f1798b736473f2d260fd6d5d82
SHA5126f8299fc2e99c6250cba2ee38d48050a491ba8e5155c0730a06dbc114ceb1e6b500b2b079f5f5fe06d7f322299090497e24dde125223b08e301ab2c6bcd81aca
-
Filesize
320B
MD511203057deede762a37aa567c0fa3879
SHA1316f2349f79bba08f497f27caf0ed1cdadabbee6
SHA25615589af8e4dee41f2f53ca7f74a627977a9bfa9bb04f30ad9afeb9ce48e9f2f8
SHA51231e59df19d5e8bf91ec1d1d4a1872d9d5dda5c955131833c3e14610b70b408002b8fae96e8e1f515d276d8b377830c51a4fe92ef1bc74fae1471087b344299bd
-
Filesize
320B
MD5561ce29c1364a7145759635b91632ad8
SHA1513c81dc8cff3037048bf84cf1a6b1cf2302b404
SHA25688f4be513f303928ff2b823342e936be74521e5e945df39c919957fc887f1be5
SHA512c79b0ecb78ea6bc5df37451497f3169f92ee282dd6660b69b9660eb8baac69c125a44bb02589da5846f70c36868cb89142c5e6af6c788d3bcbf0a2ff5d964b8d
-
Filesize
320B
MD5f1f151b6262dfe40c645ddb91cfefa69
SHA1ff977a50bd22047320366787390755d0edb546c9
SHA256ad35646253a73a20ea9457532340c75c9c1c4ee58336108728ef3b10ab70f4c6
SHA5125475865d0ebc22143eefa60fd99a60d6cfeb91ad5c7cd33c2303a256f4056b6e4be79084d694150e96a920d97583c13599391f16dbf1bdb96f079251785e8630
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB