Overview

overview

10

Static

static

10

ea75a1039d...18.exe

windows7-x64

10

ea75a1039d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea75a1039dcb9b1e04e987f89dcab5c5_JaffaCakes118

  • Size

    28KB

  • Sample

    240919-df3essxfmk

  • MD5

    ea75a1039dcb9b1e04e987f89dcab5c5

  • SHA1

    eac4e725117c04dedf8cdedd160dd7bd82a0ee68

  • SHA256

    8abdf007593a3b46cb0022be1254c8fe6fcb4783da936690b5e31ca6563becca

  • SHA512

    fc4e05d7b04b5edcc7a324b6c267b442f1bbf85666ce3aea25677ae141ef7928b63f69ffd16f30a7b2b92c42cf78381bd7d288ccdd9884d3509b0d0b29d62b92

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNnYeywk:Dv8IRRdsxq1DjJcqf9Vwk

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ea75a1039dcb9b1e04e987f89dcab5c5_JaffaCakes118

    • Size

      28KB

    • MD5

      ea75a1039dcb9b1e04e987f89dcab5c5

    • SHA1

      eac4e725117c04dedf8cdedd160dd7bd82a0ee68

    • SHA256

      8abdf007593a3b46cb0022be1254c8fe6fcb4783da936690b5e31ca6563becca

    • SHA512

      fc4e05d7b04b5edcc7a324b6c267b442f1bbf85666ce3aea25677ae141ef7928b63f69ffd16f30a7b2b92c42cf78381bd7d288ccdd9884d3509b0d0b29d62b92

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNnYeywk:Dv8IRRdsxq1DjJcqf9Vwk

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks