Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/01/2025, 07:46
General
-
Target
d5b460b7677f683663c3268b7d05f7fa9667278505da8d86cc70854ec64b4714.exe
-
Size
29KB
-
MD5
119ed2939d5e189109285e9ae008aaef
-
SHA1
cb9ca021dc0feebf12aa186971d4fd689313362f
-
SHA256
d5b460b7677f683663c3268b7d05f7fa9667278505da8d86cc70854ec64b4714
-
SHA512
fa36f33154c5d827c80936eeb64d51fc908d22924614faf2c4dd520191c765e6dab393a5f7772c072291835f328c8d26952a3bedbd77ca46288797b2d9055c78
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/5:AEwVs+0jNDY1qi/qx
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5b460b7677f683663c3268b7d05f7fa9667278505da8d86cc70854ec64b4714.exe"C:\Users\Admin\AppData\Local\Temp\d5b460b7677f683663c3268b7d05f7fa9667278505da8d86cc70854ec64b4714.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD57cd311c2098bcabacc07ff721924abe9
SHA15852b7f5237baa04090d94a982eb84899d63c14b
SHA256f8daa84d7b5eafe9bb3b3ed29012c7b437836d64e27d5daa05191c0493af6294
SHA5121e0acaeb1d509dcc90ebadacea7b4c940b2ed174cccc11d640741dd0940af705ccf1f5302dd713a52117efa19c13bde7ed612d6091410f27b0e8c3ca5bc10b5d
-
Filesize
352B
MD563311188436c55e37573df63eaf9aa9c
SHA1d4c77cad871ff74e6f0c58c763aeb10d3b83116d
SHA256fc3c49e045c413628785ef881511ec98ddd504e65e634f0dbe44951e6e162774
SHA512a27e819c46473aa67a4bcb079d10a1047925c0f912bb0fd56bb7c8708f16c51ab1cd8549daa394fc47a13c7befe2ee8294f336f323b91428de8a45eeaf170fa7
-
Filesize
352B
MD50c07f452d8d12a6c150100022b78f449
SHA1ae2037610da34df38768b36c81378373cedcbde9
SHA256f39b4839d2fed164a7e69dce7cd764f34f39fa417ea3cf1986ddccb89a89b7c4
SHA512f2130e97d799a1cc12dbc3603e709f3ddf7b1eeb397cfb238957136d9494b87d52fd4c4c7735f1def389a44caa2f26a47e6aaaba644b14c96311a2bebffd815b
-
Filesize
352B
MD53d25b6c0e9890904030a8fc7fa5e9621
SHA10c0e4583be0415991dbc62ab92694356abe9c06c
SHA256c2f971a254b31a501792aba453fa13e53c7aa956e88af45a0cd5fded44f08ea3
SHA5124508d74667d56f30d0d7257046cce9d1605c25b45baab3b48f432653875ea1acc32134f2b2a482c3cd59f579616443af6fc0a81931aee20baa2ea4c6430e0204
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB