Overview

overview

10

Static

static

5

e67c3f585b...aN.exe

windows7-x64

10

e67c3f585b...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e67c3f585bf55bd7664a2f133172bcb052b176cb4ed4e099beb1f4f6fc318d6aN.exe

  • Size

    29KB

  • Sample

    250108-pbvpya1pgm

  • MD5

    944941a096caaac74e76dd7a8d3adbd0

  • SHA1

    f2bb260a06c9c03b60c77e93a1f30a48d57fd1d6

  • SHA256

    e67c3f585bf55bd7664a2f133172bcb052b176cb4ed4e099beb1f4f6fc318d6a

  • SHA512

    004f2b6f394a7b3d8e4c89fda6522ba06394e54be95ec1a2bddf078fee2662707f21a29690761868a0ceb53c022813cd129428af42d5749481a36ff86dc1d407

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Mh3:AEwVs+0jNDY1qi/qEV

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      e67c3f585bf55bd7664a2f133172bcb052b176cb4ed4e099beb1f4f6fc318d6aN.exe

    • Size

      29KB

    • MD5

      944941a096caaac74e76dd7a8d3adbd0

    • SHA1

      f2bb260a06c9c03b60c77e93a1f30a48d57fd1d6

    • SHA256

      e67c3f585bf55bd7664a2f133172bcb052b176cb4ed4e099beb1f4f6fc318d6a

    • SHA512

      004f2b6f394a7b3d8e4c89fda6522ba06394e54be95ec1a2bddf078fee2662707f21a29690761868a0ceb53c022813cd129428af42d5749481a36ff86dc1d407

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Mh3:AEwVs+0jNDY1qi/qEV

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks