Overview

overview

10

Static

static

5

56f209d64b...40.exe

windows7-x64

10

56f209d64b...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56f209d64bb3fbad7b99964d56dce1d4dbb51081ec4848fdae44e20f5556ae40.exe

  • Size

    29KB

  • Sample

    250112-2dknzavmbj

  • MD5

    8ce48653bf080094aca70c8828605bb4

  • SHA1

    ea487d665502ffc873777b5b7639da2c9ebcc445

  • SHA256

    56f209d64bb3fbad7b99964d56dce1d4dbb51081ec4848fdae44e20f5556ae40

  • SHA512

    7cddfd6f537546fdd3379dfb69cfcb88d25dc6142a1169f1cec6f080bfdcced3292e6373e6fa7cf065dfaac7792927bc08b3337deb73640a95e319c30e92e341

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Lhe:AEwVs+0jNDY1qi/qzQ

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      56f209d64bb3fbad7b99964d56dce1d4dbb51081ec4848fdae44e20f5556ae40.exe

    • Size

      29KB

    • MD5

      8ce48653bf080094aca70c8828605bb4

    • SHA1

      ea487d665502ffc873777b5b7639da2c9ebcc445

    • SHA256

      56f209d64bb3fbad7b99964d56dce1d4dbb51081ec4848fdae44e20f5556ae40

    • SHA512

      7cddfd6f537546fdd3379dfb69cfcb88d25dc6142a1169f1cec6f080bfdcced3292e6373e6fa7cf065dfaac7792927bc08b3337deb73640a95e319c30e92e341

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Lhe:AEwVs+0jNDY1qi/qzQ

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks