Overview

overview

10

Static

static

5

9c6db22974...47.exe

windows7-x64

10

9c6db22974...47.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c6db229747905fceff1fa41d78bea52d73ea78d11391e2acff1e06ec71cd847

  • Size

    29KB

  • Sample

    250120-jjj1hsyphp

  • MD5

    7d8266e2e50f5d120d557a147ea6c0a8

  • SHA1

    56a957f1a43921d27d3847d7623b47de122fc73f

  • SHA256

    9c6db229747905fceff1fa41d78bea52d73ea78d11391e2acff1e06ec71cd847

  • SHA512

    2270ce4b857a37db211519c6e0822d79071a2e2bed65bcf4efe1bbeaf05a41f8380a01c9eb59d3d36cbd697b98c1b0d3df31fdd256bc13e7e5f15c0e9c66cabd

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/nhQ:AEwVs+0jNDY1qi/qPm

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      9c6db229747905fceff1fa41d78bea52d73ea78d11391e2acff1e06ec71cd847

    • Size

      29KB

    • MD5

      7d8266e2e50f5d120d557a147ea6c0a8

    • SHA1

      56a957f1a43921d27d3847d7623b47de122fc73f

    • SHA256

      9c6db229747905fceff1fa41d78bea52d73ea78d11391e2acff1e06ec71cd847

    • SHA512

      2270ce4b857a37db211519c6e0822d79071a2e2bed65bcf4efe1bbeaf05a41f8380a01c9eb59d3d36cbd697b98c1b0d3df31fdd256bc13e7e5f15c0e9c66cabd

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/nhQ:AEwVs+0jNDY1qi/qPm

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks