Overview

overview

10

Static

static

5

e81d3ea041...99.exe

windows7-x64

10

e81d3ea041...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e81d3ea041f808b9b8e7bb358701258766e572873a10cf6a9b1d3bb26fdc7a99.exe

  • Size

    29KB

  • Sample

    250109-fcbtsaynev

  • MD5

    398511056da2548ed911141e05c61175

  • SHA1

    487b168deb54c471cf48088342df83174755a3da

  • SHA256

    e81d3ea041f808b9b8e7bb358701258766e572873a10cf6a9b1d3bb26fdc7a99

  • SHA512

    d2a88db66b47dcab0d87ba2cbd4dc091af3db35ab31a6b00ae8bc1ed821864d2dd3d007b14f5afaf6492339c01c4c0cca3b2768ec7151b6f03354e385c03e81d

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Nhg:AEwVs+0jNDY1qi/q1i

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      e81d3ea041f808b9b8e7bb358701258766e572873a10cf6a9b1d3bb26fdc7a99.exe

    • Size

      29KB

    • MD5

      398511056da2548ed911141e05c61175

    • SHA1

      487b168deb54c471cf48088342df83174755a3da

    • SHA256

      e81d3ea041f808b9b8e7bb358701258766e572873a10cf6a9b1d3bb26fdc7a99

    • SHA512

      d2a88db66b47dcab0d87ba2cbd4dc091af3db35ab31a6b00ae8bc1ed821864d2dd3d007b14f5afaf6492339c01c4c0cca3b2768ec7151b6f03354e385c03e81d

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Nhg:AEwVs+0jNDY1qi/q1i

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks