Extracted

• • Target

    Kami Export - Marcus Plummer - Economics Scavenger Hunt - Google Docs.pdf

  • Size

    337KB

  • MD5

    bdc07cb358d5c010b2013c0cf849644b

  • SHA1

    7aa9dcc5ef159cc5b26a2108c5738bf30b1947da

  • SHA256

    558204c7ec59cd2ede9e9e7f6fede6c69aa14acb292d467c68fce1f4e77bb437

  • SHA512

    fd85b8afb5d4748c7b51665f7cf1ea4787ec230473a6f203231eba76748205f79057fe419859cf33061c38ae0144740e6f2765d03b0a465d3d66167ce6d634a5

  • SSDEEP

    6144:dwWA6rXulXa0S44x4LRivZ6iORrkCDm0yXXdbpsMa/0:dY6rXu5lS44QiB6iO9kCDTkvsMv

  Score

  10^/10

  discoverydanabotmydoombankerbotnetpersistencetrojanupxworm

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot family

    danabot

  • Danabot x86 payload

    Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

    botnet

  • Detects MyDoom family

  • MyDoom

    MyDoom is a Worm that is written in C++.

    wormmydoom

  • Mydoom family

    mydoom

  • Blocklisted process makes network request

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Modifies system executable filetype association

    persistence

  • Adds Run key to start application

    persistence

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2