Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2025, 15:50 UTC

Errors

Reason
Reading agent response: read tcp 10.127.0.1:51870->10.127.0.188:8000: read: connection timed out

General

  • Target

    2750801e815da91a4cbee9754040cf35c7e768be13044cdf5c39788c7fa08c19.exe

  • Size

    29KB

  • MD5

    4bdf6ff55589f81e261c5f8ce04eddf3

  • SHA1

    920140ce2dedee06b09c9e271e810cb34da5080f

  • SHA256

    2750801e815da91a4cbee9754040cf35c7e768be13044cdf5c39788c7fa08c19

  • SHA512

    3dad6863ec0565613ae13c132d84e2873020395188ab1dbceba06e6eeffb45251c5313a7758f37f662eaa92bb0a4d63c6e1cbc490c6ea6087f7e68cbb617cceb

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/qhY:AEwVs+0jNDY1qi/qyW

Score
10/10

Malware Config

Signatures

  • Detects MyDoom family 1 IoCs
  • MyDoom

    MyDoom is a Worm that is written in C++.

  • Mydoom family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2750801e815da91a4cbee9754040cf35c7e768be13044cdf5c39788c7fa08c19.exe
    "C:\Users\Admin\AppData\Local\Temp\2750801e815da91a4cbee9754040cf35c7e768be13044cdf5c39788c7fa08c19.exe"
    1⤵
      PID:2252
      • C:\Windows\services.exe
        "C:\Windows\services.exe"
        2⤵
          PID:2732

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2252-2-0x0000000000500000-0x0000000000510200-memory.dmp

        Filesize

        64KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.