Overview

overview

10

Static

static

5

eadb6ad7eb...bN.exe

windows7-x64

10

eadb6ad7eb...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eadb6ad7eb8fb4ede6fdd42b6b060572307bb15bfdaa5b6dfa5a7281adc8cb8bN.exe

  • Size

    29KB

  • Sample

    250117-l8ztdatkfq

  • MD5

    82ceb8ff01a49814fea0c9d706d5e4a0

  • SHA1

    05fe2151961adf8ce6c8a152efb6bccf7d48212e

  • SHA256

    eadb6ad7eb8fb4ede6fdd42b6b060572307bb15bfdaa5b6dfa5a7281adc8cb8b

  • SHA512

    366686804c31c4ba470586d14873c1173e84264a03699ae35265e545b67c1ce870e03d809dcbd0279267da71e53718828ee57212897c71f5c36802780a7de7dd

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/qh7:AEwVs+0jNDY1qi/qiF

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      eadb6ad7eb8fb4ede6fdd42b6b060572307bb15bfdaa5b6dfa5a7281adc8cb8bN.exe

    • Size

      29KB

    • MD5

      82ceb8ff01a49814fea0c9d706d5e4a0

    • SHA1

      05fe2151961adf8ce6c8a152efb6bccf7d48212e

    • SHA256

      eadb6ad7eb8fb4ede6fdd42b6b060572307bb15bfdaa5b6dfa5a7281adc8cb8b

    • SHA512

      366686804c31c4ba470586d14873c1173e84264a03699ae35265e545b67c1ce870e03d809dcbd0279267da71e53718828ee57212897c71f5c36802780a7de7dd

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/qh7:AEwVs+0jNDY1qi/qiF

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks