General

  • Target

    f975dec6fe575957e25362e78cb8ab99454851f405a464d3608db389f6232472N.exe

  • Size

    29KB

  • Sample

    250117-vas3lsxlaq

  • MD5

    a24ccc33c230a9ee203d6b04b07ed6d0

  • SHA1

    97857230d52c78f7c28a437a58d0d24ebee3e8d7

  • SHA256

    f975dec6fe575957e25362e78cb8ab99454851f405a464d3608db389f6232472

  • SHA512

    ab1b0cb85963e06e6f473a567247b628d0d6cdb5ec123e436a161cd454b2f2d9d97131361e0b507438afdfe901caeead7dbaf69d70de1072f741c2c866b61cfa

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/4:AEwVs+0jNDY1qi/qw

Malware Config

Targets

    • Target

      f975dec6fe575957e25362e78cb8ab99454851f405a464d3608db389f6232472N.exe

    • Size

      29KB

    • MD5

      a24ccc33c230a9ee203d6b04b07ed6d0

    • SHA1

      97857230d52c78f7c28a437a58d0d24ebee3e8d7

    • SHA256

      f975dec6fe575957e25362e78cb8ab99454851f405a464d3608db389f6232472

    • SHA512

      ab1b0cb85963e06e6f473a567247b628d0d6cdb5ec123e436a161cd454b2f2d9d97131361e0b507438afdfe901caeead7dbaf69d70de1072f741c2c866b61cfa

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/4:AEwVs+0jNDY1qi/qw

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks