Overview

overview

10

Static

static

5

fd482c37ad...7N.exe

windows7-x64

10

fd482c37ad...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd482c37addb2cd0f5e1b1c1f2784f296c25901d3a28dc2070e23c1164be3f97N.exe

  • Size

    29KB

  • Sample

    250109-f22fqszngx

  • MD5

    c8ff4bbc0711553de04b10a272b7be60

  • SHA1

    e6d0c5dfd8c627dbc70cbe51a3485cda12ba329c

  • SHA256

    fd482c37addb2cd0f5e1b1c1f2784f296c25901d3a28dc2070e23c1164be3f97

  • SHA512

    292555583ea399af61ebed78917d3a5f5dfe85c52d6763b80e9c8c1cf95839b145e8248248ef85676e25311646e1947277c8a1d149b9271dfe29cbd343bf98cc

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/gS:AEwVs+0jNDY1qi/qX

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      fd482c37addb2cd0f5e1b1c1f2784f296c25901d3a28dc2070e23c1164be3f97N.exe

    • Size

      29KB

    • MD5

      c8ff4bbc0711553de04b10a272b7be60

    • SHA1

      e6d0c5dfd8c627dbc70cbe51a3485cda12ba329c

    • SHA256

      fd482c37addb2cd0f5e1b1c1f2784f296c25901d3a28dc2070e23c1164be3f97

    • SHA512

      292555583ea399af61ebed78917d3a5f5dfe85c52d6763b80e9c8c1cf95839b145e8248248ef85676e25311646e1947277c8a1d149b9271dfe29cbd343bf98cc

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/gS:AEwVs+0jNDY1qi/qX

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks