Overview

overview

10

Static

static

5

9254a278b0...6a.exe

windows7-x64

10

9254a278b0...6a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9254a278b07cf83beefddea814e412f07f3847e28d91db98abb1a4436ed1c36a.exe

  • Size

    29KB

  • Sample

    250113-n736hstmgj

  • MD5

    e8f572e2f8be85245569bfc4d3a9aff3

  • SHA1

    0e994acb48af9dd13215dfc69436c39f786e3099

  • SHA256

    9254a278b07cf83beefddea814e412f07f3847e28d91db98abb1a4436ed1c36a

  • SHA512

    6c2d1f81f79ff20cbdcf600be02155c15d4250f02dc5722e50935011ebc368edae2520e964a617ee072c56bafab2d1c4f468f977c60f8201abc3b9f6e1009158

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/OhP:AEwVs+0jNDY1qi/qmd

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      9254a278b07cf83beefddea814e412f07f3847e28d91db98abb1a4436ed1c36a.exe

    • Size

      29KB

    • MD5

      e8f572e2f8be85245569bfc4d3a9aff3

    • SHA1

      0e994acb48af9dd13215dfc69436c39f786e3099

    • SHA256

      9254a278b07cf83beefddea814e412f07f3847e28d91db98abb1a4436ed1c36a

    • SHA512

      6c2d1f81f79ff20cbdcf600be02155c15d4250f02dc5722e50935011ebc368edae2520e964a617ee072c56bafab2d1c4f468f977c60f8201abc3b9f6e1009158

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/OhP:AEwVs+0jNDY1qi/qmd

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks