Overview

overview

10

Static

static

10

b916cbb97b...18.exe

windows7-x64

10

b916cbb97b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b916cbb97b626613d4ae2029c1108efd_JaffaCakes118

  • Size

    38KB

  • Sample

    240822-zhpglszbnl

  • MD5

    b916cbb97b626613d4ae2029c1108efd

  • SHA1

    eb6c634ac88ff69641c4665a50e755a44efdb551

  • SHA256

    d51ea59f4ec26d0c1267bb33ac4eca587d61285bc8c12337930cd79693cf65e6

  • SHA512

    94c8a42174274d40cf1274321dff549db014de5823c5f1441d8b34bb88d539e03ce47891cfb27ce74c586e02ee041b6c8b2cb9a5b80367c5ba507fc6d1fc14fe

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp420skstEBSTZX+0Bj:SNqaLV8a620slDA0Bj

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      b916cbb97b626613d4ae2029c1108efd_JaffaCakes118

    • Size

      38KB

    • MD5

      b916cbb97b626613d4ae2029c1108efd

    • SHA1

      eb6c634ac88ff69641c4665a50e755a44efdb551

    • SHA256

      d51ea59f4ec26d0c1267bb33ac4eca587d61285bc8c12337930cd79693cf65e6

    • SHA512

      94c8a42174274d40cf1274321dff549db014de5823c5f1441d8b34bb88d539e03ce47891cfb27ce74c586e02ee041b6c8b2cb9a5b80367c5ba507fc6d1fc14fe

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp420skstEBSTZX+0Bj:SNqaLV8a620slDA0Bj

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks