Overview

overview

10

Static

static

5

dded295e98...6N.exe

windows7-x64

10

dded295e98...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dded295e989f79152204b5791eb13f5266126deeeb2c3bf5ef6ff1cef422f216N.exe

  • Size

    29KB

  • Sample

    250121-mx762szqbn

  • MD5

    7bb89a9e7783d0e1ab4fc43dd44f4520

  • SHA1

    a8a520d96036d432edb97d3dafde9379697f2b40

  • SHA256

    dded295e989f79152204b5791eb13f5266126deeeb2c3bf5ef6ff1cef422f216

  • SHA512

    08a0732dad5c83cbe8cb14bcea8f57222960acbad2874c9b82df8c6f7ad3f05c47748148659d725bde45381a2d83ea9af9b17fb556b7fbcdadc36c63f42c07f7

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/AhX:AEwVs+0jNDY1qi/qY1

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      dded295e989f79152204b5791eb13f5266126deeeb2c3bf5ef6ff1cef422f216N.exe

    • Size

      29KB

    • MD5

      7bb89a9e7783d0e1ab4fc43dd44f4520

    • SHA1

      a8a520d96036d432edb97d3dafde9379697f2b40

    • SHA256

      dded295e989f79152204b5791eb13f5266126deeeb2c3bf5ef6ff1cef422f216

    • SHA512

      08a0732dad5c83cbe8cb14bcea8f57222960acbad2874c9b82df8c6f7ad3f05c47748148659d725bde45381a2d83ea9af9b17fb556b7fbcdadc36c63f42c07f7

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/AhX:AEwVs+0jNDY1qi/qY1

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks