Overview

overview

10

Static

static

10

fa58af10ae...18.exe

windows7-x64

10

fa58af10ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa58af10aea40c68804d9270b4a1f4ec_JaffaCakes118

  • Size

    33KB

  • Sample

    240927-nxnm3s1cnj

  • MD5

    fa58af10aea40c68804d9270b4a1f4ec

  • SHA1

    cc4d92bad8ee53e54a4cd87d5e67c0d2733671f2

  • SHA256

    82aa6ef787f3f4e6a8a7ee70a1749fb5050c1bd64dbebee05f34f1c98ae2cf07

  • SHA512

    6099e79ea53ba5c9f3f3fa5ad0da38a0aa4524137736d059880ccb097cacd18c3a30952cf545d5914d07bcaf305dde7b19bb521abb7ff13fc9998717e2c3525b

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4iXSuNpeGT9dtX5dz:SNqaLV8a6wjeGTrtXXz

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      fa58af10aea40c68804d9270b4a1f4ec_JaffaCakes118

    • Size

      33KB

    • MD5

      fa58af10aea40c68804d9270b4a1f4ec

    • SHA1

      cc4d92bad8ee53e54a4cd87d5e67c0d2733671f2

    • SHA256

      82aa6ef787f3f4e6a8a7ee70a1749fb5050c1bd64dbebee05f34f1c98ae2cf07

    • SHA512

      6099e79ea53ba5c9f3f3fa5ad0da38a0aa4524137736d059880ccb097cacd18c3a30952cf545d5914d07bcaf305dde7b19bb521abb7ff13fc9998717e2c3525b

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4iXSuNpeGT9dtX5dz:SNqaLV8a6wjeGTrtXXz

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks