Overview

overview

10

Static

static

5

ac73295694...12.exe

windows7-x64

10

ac73295694...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac73295694a82bbc056db3acf195fd60036e0bd9e8a3638047c8cb14a7933412.exe

  • Size

    29KB

  • Sample

    250113-grysja1rfk

  • MD5

    2788526ab9ef32c8ff28a1ab1073f500

  • SHA1

    93a5c0236a40765dc9fd47f1c7aaf342a87b4023

  • SHA256

    ac73295694a82bbc056db3acf195fd60036e0bd9e8a3638047c8cb14a7933412

  • SHA512

    712863f3e1c3151389ec89e45ce5c7a7b825c9a2a9927dd17149259e82d0da8cabde416b4f56c77a44cc6ebad3f01393f78cdfaad78fda6255c747c114302b0c

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/0h7:AEwVs+0jNDY1qi/qsZ

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ac73295694a82bbc056db3acf195fd60036e0bd9e8a3638047c8cb14a7933412.exe

    • Size

      29KB

    • MD5

      2788526ab9ef32c8ff28a1ab1073f500

    • SHA1

      93a5c0236a40765dc9fd47f1c7aaf342a87b4023

    • SHA256

      ac73295694a82bbc056db3acf195fd60036e0bd9e8a3638047c8cb14a7933412

    • SHA512

      712863f3e1c3151389ec89e45ce5c7a7b825c9a2a9927dd17149259e82d0da8cabde416b4f56c77a44cc6ebad3f01393f78cdfaad78fda6255c747c114302b0c

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/0h7:AEwVs+0jNDY1qi/qsZ

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks