Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-01-2025 07:21
General
-
Target
bdaec11b5049c2ca27f68d287d66500d2c4b6269d43f94e015ea0ca488a072b7.exe
-
Size
29KB
-
MD5
662e69f76ad08732d4b20ceec98fed69
-
SHA1
2b3d465282acf49264598fc0c7faba049205b6a1
-
SHA256
bdaec11b5049c2ca27f68d287d66500d2c4b6269d43f94e015ea0ca488a072b7
-
SHA512
cc2244fe2b93049e2d50b2d2cbf617ee0ca406bd670742375bc4d1d9822ff80ffc196cbc749e950ceb5754e90ac4f394f04ddc4842c74931e0736c1ab4905760
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/WhH:AEwVs+0jNDY1qi/qu9
Malware Config
Signatures
-
Detects MyDoom family 12 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 31 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bdaec11b5049c2ca27f68d287d66500d2c4b6269d43f94e015ea0ca488a072b7.exe"C:\Users\Admin\AppData\Local\Temp\bdaec11b5049c2ca27f68d287d66500d2c4b6269d43f94e015ea0ca488a072b7.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD55431b34b55fc2e8dfe8e2e977e26e6b5
SHA187cf8feeb854e523871271b6f5634576de3e7c40
SHA2563d7c76daab98368a0dd25cd184db039cdd5d1bc9bd6e9bb91b289119047f5432
SHA5126f309dd924ba012486bcf0e3bafe64899007893ea9863b6f4e5428384ad23d9942c74d17c42a5cf9922a0e0fd8d61c287a2288a945a775586125d53376b9325c
-
Filesize
304B
MD5cde2c6ec81201bdd39579745c69d502f
SHA1e025748a7d4361b2803140ed0f0abda1797f5388
SHA256a81000fc443c3c99e0e653cca135e16747e63bccebd5052ed64d7ae6f63f227f
SHA512de5ca6169b2bb42a452ebd2f92c23bad3a98c01845a875336d6affe7f0192c2782b1f66f149019c0b880410c836fc45b2e9157dcccc7ad0d9e5953521a2151d4
-
Filesize
312B
MD5e5c2364375c0a8a786a9508a840b6299
SHA1bec1874db0d2348274b6656d1383e262f73e2bc6
SHA25651b67ae1066eb179562cf80a8a156bbd4b139b83072f610bf62c0b6d58ed17f3
SHA512ee19a8fa40bc7e991ac289eb30ceec8264d6071f124e99791022961c99f25b97def4f13fa96149eb52786d1104d85d20410e65a333304c0df6ba858472a557d3
-
Filesize
315B
MD5e510f9586fd45ddb7f0c00cc01b5bb78
SHA10f49be1ea6f9228f7fa5877a74df5913d500f44c
SHA25606dc56e918b87be102dbef5a82c2b9e572d2e4dd4e778026ab8aa59ec58c454c
SHA5124a6cd27994a9bab95b152bd6be520dfa186b3b067345a350ced80933757ce875bf53cdaf3413ddf1ed14968adc233f7cb6bb2fcda0fa19c4d68e2e9d86416b90
-
Filesize
308B
MD5d633d65c70fce887db4580e12d24dda5
SHA18e37901eb72c58f96990f30fe13bb1dcb22874e8
SHA256358883157b84d0634a7a4cabb66dbd4d22f57db6526a8563dfa0748b122ef76b
SHA512357938278bfd73b7be94e286ee09730ffedf00be87a175e93a9bb25a8570caa79b8cbfb468c86d96d262fb31dbfba9f3b58aa134887752e8a4185f23cd2d5bae
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD578f6fdd51c6f522e90e31699a5bdb1b9
SHA18be5dea79aba0b6d39911f19590e9fde35503eb7
SHA256512593a5821e2d15ed8f32052ce11a22951d9998d04043a250f9b9751c3dafe8
SHA51293435c3ebafd183c1262feb743d0ad62713cb05be5b66974aa73848439818b244b82349b72eac5842190a2266407c77d3b328226d0dc5b5918b26cee9145d400
-
Filesize
320B
MD52d0af4153509029a626dce82c00f4f81
SHA1d519aec14e642955fdc086c7fc109ecc9bcef974
SHA2567c32baa9b416b9f6e60819be3f9cb0ad79e0a2896554f69e0d3c1ebd1a23c053
SHA512fae058919c7898f8086e65ecf3566d78af3e96f5c63e6d7a4f07d227bdb9db10365fddc74fd547ec949354f810bcbe4ae39e218687e35c82b3012322e7ae27a3
-
Filesize
320B
MD50fef634a5ad821fb526551e33c078d4f
SHA121817d6eaab7b607f681dbe127f666c210decd44
SHA25683ef7462235959c1851f36d3a0923353281afa866ba7fbf3dcd6a98ca4cf791f
SHA512ccd4f415c17b7058fbd9f2004c50dfa0ec1f3b466947104a24d611a374793b77ffa1ae83c565ded65d02a7e435295e152ed747010866ccba3cc3e14c53b1e310
-
Filesize
320B
MD529de3d267b2ccfbf35a17b1c7b6e8cf6
SHA14b879d350cbb2826c6dd146f0e09b0c47b6080b8
SHA256b90c49c526a7f308e7036bee53503e3603eed1399ea4e7c52420b6eb55290cc3
SHA512ce3d2dafeacb24e821a9008570e20e8edd9e7aff23aca2d598f6b33c35330613968bbf23efe378ff9a8effadffb1a877798109a790fd2202eb0213479cead7f4
-
Filesize
320B
MD508a27ed660dbd4505e9e84d656c3e0eb
SHA1527e26f65366181b59f4daf6784445a9a7654ec1
SHA256e65ed42e46a3c38f6c851038db0263a551fc2783296c3b116fc4cdd49101451f
SHA51214e7e2811a47b5838d7106459ab6311959434c77b2e70249be92248bcb8e4544d280336ea50193b008613e0cdab8bec54cee634403c5619ab8d8da505f45ccb2
-
Filesize
320B
MD5b165f442781694ebd026c1a779692507
SHA10a52efe9fbb0e2f2387a6f17d56b42fef203fdd4
SHA2566c9c52dd480c95de9ab5dc3d3691267843253cb529717be4a3b09dc9a97c002d
SHA512a8be27256405e87a6f1f70df0d91a5874873a49d6b18b21054f0d05b9b10fc497272f2c8e54929578d5e8d4f3071cb6b4c2cce967883b1eee3cfd17349c6190c
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB