Overview

overview

10

Static

static

5

a44f5c3616...9N.exe

windows7-x64

10

a44f5c3616...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a44f5c36163c0c04663faf29cc3b0fdbd9cdafaacf8f6f831b8d05b0e42beca9N.exe

  • Size

    29KB

  • Sample

    250115-2m5qhaxrgx

  • MD5

    056257300412c8dd827e6c6949730490

  • SHA1

    bea5b8f0493ae012c29837c6f4625b71ad2e46dc

  • SHA256

    a44f5c36163c0c04663faf29cc3b0fdbd9cdafaacf8f6f831b8d05b0e42beca9

  • SHA512

    2a24bd0535dd2640f44b72b44f214bbecfa4c6b363ef96bf4baeeaaead35fe46d823663ee89855e59eb63770793455df9500f718c51f005969206225b227e803

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/yhA:AEwVs+0jNDY1qi/qaS

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      a44f5c36163c0c04663faf29cc3b0fdbd9cdafaacf8f6f831b8d05b0e42beca9N.exe

    • Size

      29KB

    • MD5

      056257300412c8dd827e6c6949730490

    • SHA1

      bea5b8f0493ae012c29837c6f4625b71ad2e46dc

    • SHA256

      a44f5c36163c0c04663faf29cc3b0fdbd9cdafaacf8f6f831b8d05b0e42beca9

    • SHA512

      2a24bd0535dd2640f44b72b44f214bbecfa4c6b363ef96bf4baeeaaead35fe46d823663ee89855e59eb63770793455df9500f718c51f005969206225b227e803

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/yhA:AEwVs+0jNDY1qi/qaS

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks