Overview

overview

10

Static

static

5

8579b9eeea...06.exe

windows7-x64

10

8579b9eeea...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8579b9eeea0f62d42b8977da823c5d4f7a0dd476a3c42e9e0788f02022e4d706.exe

  • Size

    29KB

  • Sample

    250111-mvxbrszlfn

  • MD5

    1d522725bac2f853460260a277d4fa18

  • SHA1

    e50b8a1e33d7e848e365dd6fc5d27dcab8af6ac0

  • SHA256

    8579b9eeea0f62d42b8977da823c5d4f7a0dd476a3c42e9e0788f02022e4d706

  • SHA512

    225b93df2fd3857cd29f0e25154dc016e7ba56320b8679251a1ea340e97e5093dc01b5abd77eb14fa4c1c3ed884e23538726cc1c1fcf4c4b609ecabe5e5165b1

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Gh9:AEwVs+0jNDY1qi/qu7

Score
10/10
mydoommicrosoftdiscoverypersistencephishingproduct:outlookupxworm

Malware Config

Targets

    • Target

      8579b9eeea0f62d42b8977da823c5d4f7a0dd476a3c42e9e0788f02022e4d706.exe

    • Size

      29KB

    • MD5

      1d522725bac2f853460260a277d4fa18

    • SHA1

      e50b8a1e33d7e848e365dd6fc5d27dcab8af6ac0

    • SHA256

      8579b9eeea0f62d42b8977da823c5d4f7a0dd476a3c42e9e0788f02022e4d706

    • SHA512

      225b93df2fd3857cd29f0e25154dc016e7ba56320b8679251a1ea340e97e5093dc01b5abd77eb14fa4c1c3ed884e23538726cc1c1fcf4c4b609ecabe5e5165b1

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Gh9:AEwVs+0jNDY1qi/qu7

    Score
    10/10
    mydoomdiscoverypersistenceupxwormmicrosoftphishingproduct:outlook

    • Detected microsoft outlook phishing page

      phishingmicrosoftproduct:outlook

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks