Overview

overview

10

Static

static

10

c8c15b8c23...18.exe

windows7-x64

10

c8c15b8c23...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8c15b8c239cba96a49b3b5b72bedf4a_JaffaCakes118

  • Size

    40KB

  • Sample

    240829-nwtspszcjh

  • MD5

    c8c15b8c239cba96a49b3b5b72bedf4a

  • SHA1

    33042ee02f6b3fc82940a9787f02c32939b0a787

  • SHA256

    234d54ec8786f9acf7027ff9e30e38d6f688672a85094a1dd1bc1cc18a5b6291

  • SHA512

    b06a534516f7463e9319ec36df0b5bd50e8e8c72c4ee62818ffb06cffc671e2c7cea540a14e53d63160f24869e0da513c60d897794b6f06b24a0062dd5268afb

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH58:aqk/Zdic/qjh8w19JDH58

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      c8c15b8c239cba96a49b3b5b72bedf4a_JaffaCakes118

    • Size

      40KB

    • MD5

      c8c15b8c239cba96a49b3b5b72bedf4a

    • SHA1

      33042ee02f6b3fc82940a9787f02c32939b0a787

    • SHA256

      234d54ec8786f9acf7027ff9e30e38d6f688672a85094a1dd1bc1cc18a5b6291

    • SHA512

      b06a534516f7463e9319ec36df0b5bd50e8e8c72c4ee62818ffb06cffc671e2c7cea540a14e53d63160f24869e0da513c60d897794b6f06b24a0062dd5268afb

    • SSDEEP

      768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH58:aqk/Zdic/qjh8w19JDH58

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks