Overview

overview

10

Static

static

5

d9843fa9f6...1e.exe

windows7-x64

10

d9843fa9f6...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9843fa9f6e74d6c5523598ded07a30652ad9a691a29f88788847c0a64067a1e.exe

  • Size

    29KB

  • Sample

    250113-pzkjwavleq

  • MD5

    ec318f4979c186d4c1c6fa27ef756223

  • SHA1

    c15f640311fb4325c6c790036e889aef7a82814d

  • SHA256

    d9843fa9f6e74d6c5523598ded07a30652ad9a691a29f88788847c0a64067a1e

  • SHA512

    5d9704d7d05439a69591916d1a8a61fa813830444d8eabd421d974374144acb6414515d05bdbe6b4d6ef8eb03ec00a00153b1894934f4ca66c27f1b456872f2f

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zhV:AEwVs+0jNDY1qi/qrv

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      d9843fa9f6e74d6c5523598ded07a30652ad9a691a29f88788847c0a64067a1e.exe

    • Size

      29KB

    • MD5

      ec318f4979c186d4c1c6fa27ef756223

    • SHA1

      c15f640311fb4325c6c790036e889aef7a82814d

    • SHA256

      d9843fa9f6e74d6c5523598ded07a30652ad9a691a29f88788847c0a64067a1e

    • SHA512

      5d9704d7d05439a69591916d1a8a61fa813830444d8eabd421d974374144acb6414515d05bdbe6b4d6ef8eb03ec00a00153b1894934f4ca66c27f1b456872f2f

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/zhV:AEwVs+0jNDY1qi/qrv

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks