Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-01-2025 01:16
General
-
Target
5c1b12230e5fc2d60e5c7f84fccfea352b714263132ea98cccb6eff771f633db.exe
-
Size
29KB
-
MD5
5a56b8069c53e2c488c86c633b54fc0f
-
SHA1
385f9a3a81bf050b34e62dd87659ffcec7850e49
-
SHA256
5c1b12230e5fc2d60e5c7f84fccfea352b714263132ea98cccb6eff771f633db
-
SHA512
1ddf0cbbf43c51cced891be5140c0310d8306d52981ac2ebfa19b242cc09fc3fc8d2fc621cad9aa1d82722eb55758c78258caeb9154239d9a3c219203e633aa6
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Ls:AEwVs+0jNDY1qi/qY
Malware Config
Signatures
-
Detects MyDoom family 7 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c1b12230e5fc2d60e5c7f84fccfea352b714263132ea98cccb6eff771f633db.exe"C:\Users\Admin\AppData\Local\Temp\5c1b12230e5fc2d60e5c7f84fccfea352b714263132ea98cccb6eff771f633db.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
29KB
MD5a7fd02a13ed84159d7be0e0c1a4d1a4b
SHA1ff0ff32c21996c5ea043ea0c92ea01623014c8ec
SHA25698f46873ef1b46c07cb90c5171c412db88922dee499364dc26a35a45a52583ac
SHA512034aa5f59c9e838d4601dc753f410a6d1b2517775617c05ec31000080030fadb44179a4d6b8af7a5b95fabe3eed8a86f30e1377e220b8d526f692f34ca6cf2d6
-
Filesize
352B
MD5fc01dbb8ad02727ce24f0a7dd19414e5
SHA185288fb3e65f0860ff15361d434d90735e69c00b
SHA2567bf4bd656e84b80603369562e4dbd1cac5ab1071a6f8d449290df0c23d06c7fe
SHA51245c1c166fbfcecefacbb0ad198674eceae2f70de0ebc78404a69ca69009fb31167f28e4e88e90000f2269ada5b3d47a13cdced09a008e4090c7c6faafca97375
-
Filesize
352B
MD50f61861d0c00b1dbf5a1734195613606
SHA143797528140b710049188eb3e0dc6085e85edf1e
SHA256dbab790e692456b2f9e7982fcd400de562934d4db4a240e2127f5ee71eae6df7
SHA512779489b4a886ca7fb3295d5aea7dd0238bdcb515650821af016906f5c9157205af57d218e52d4e91ae79d3ddb727406f017a81efb65b3757f6fb2acbf8251558
-
Filesize
352B
MD5dbbc817e1547cf6e6be6105c899d86fb
SHA1cd8e19cb0ea49e917c84a61ce4462d809293bc0d
SHA25604cf8e75313d5465899638bbd330aeea0b12a1922d98614b0c05b671e86c259f
SHA512cdf10cf991aa2d2d6befe6645dab5e27bc21e10cfc399a5174ef883de0e684ab1c9a79c3be579f65c61e1df327b91fb145986eed5531e9f1b871f379abbd923b
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB