Overview

overview

10

Static

static

5

a177a27023...a0.exe

windows7-x64

10

a177a27023...a0.exe

windows10-2004-x64

10

a177a27023...a0.exe

android-9-x86

a177a27023...a0.exe

android-10-x64

a177a27023...a0.exe

android-11-x64

a177a27023...a0.exe

ubuntu-18.04-amd64

a177a27023...a0.exe

debian-9-armhf

a177a27023...a0.exe

debian-9-mips

a177a27023...a0.exe

debian-9-mipsel

Resubmissions

11-01-2025 17:02

250111-vj5srswqfk 10

11-01-2025 16:58

250111-vg51ratpgs 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a177a27023d435cd8caf075b22656406bf3e3ecef80fa5f8339e3cb804e392a0.exe

  • Size

    29KB

  • Sample

    250111-vj5srswqfk

  • MD5

    5c99b380f17e389ee4a50b1b79a8c45f

  • SHA1

    bc037b40c11d23623f9c42a33aa2a8b20a597310

  • SHA256

    a177a27023d435cd8caf075b22656406bf3e3ecef80fa5f8339e3cb804e392a0

  • SHA512

    4c0e4ae9ee9b2e7162f4ebe4d4416c134e6929b10c1d515fd3203a1f0e94ef7baa9fae80494618cbd0bacc435a219e2c1eca40e156ce0af544df57c98e4fa27f

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/sh/:AEwVs+0jNDY1qi/q0J

Score
10/10
mydoomandroiddiscoverylinuxpersistencespywarestealerupxworm

Malware Config

Targets

    • Target

      a177a27023d435cd8caf075b22656406bf3e3ecef80fa5f8339e3cb804e392a0.exe

    • Size

      29KB

    • MD5

      5c99b380f17e389ee4a50b1b79a8c45f

    • SHA1

      bc037b40c11d23623f9c42a33aa2a8b20a597310

    • SHA256

      a177a27023d435cd8caf075b22656406bf3e3ecef80fa5f8339e3cb804e392a0

    • SHA512

      4c0e4ae9ee9b2e7162f4ebe4d4416c134e6929b10c1d515fd3203a1f0e94ef7baa9fae80494618cbd0bacc435a219e2c1eca40e156ce0af544df57c98e4fa27f

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/sh/:AEwVs+0jNDY1qi/q0J

    Score
    10/10
    mydoomdiscoverypersistencespywarestealerupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2behavioral3behavioral4behavioral5behavioral6behavioral7behavioral8behavioral9

MITRE ATT&CK Enterprise v15

Tasks