Overview

overview

10

Static

static

5

b808c31fbb...75.exe

windows7-x64

10

b808c31fbb...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b808c31fbb12b991c1d3009724ad9192d8f1066641ecb7c9b772a371164f5275.exe

  • Size

    29KB

  • Sample

    250111-gn1sqaznfp

  • MD5

    8070a3ad4420d892e2663442191840c6

  • SHA1

    f4e44977f7d056682feede278bcf249a2199268d

  • SHA256

    b808c31fbb12b991c1d3009724ad9192d8f1066641ecb7c9b772a371164f5275

  • SHA512

    d0633e1ef42d0acc527552775fa106a4618d566126fc49eb4b3e860d8397a6216364aed12578696a82064addb8217679a96f023861dc3b294ab9ff9551b69e12

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/dhQ:AEwVs+0jNDY1qi/qlG

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      b808c31fbb12b991c1d3009724ad9192d8f1066641ecb7c9b772a371164f5275.exe

    • Size

      29KB

    • MD5

      8070a3ad4420d892e2663442191840c6

    • SHA1

      f4e44977f7d056682feede278bcf249a2199268d

    • SHA256

      b808c31fbb12b991c1d3009724ad9192d8f1066641ecb7c9b772a371164f5275

    • SHA512

      d0633e1ef42d0acc527552775fa106a4618d566126fc49eb4b3e860d8397a6216364aed12578696a82064addb8217679a96f023861dc3b294ab9ff9551b69e12

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/dhQ:AEwVs+0jNDY1qi/qlG

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks