Overview

overview

10

Static

static

10

fc8647105b...18.exe

windows7-x64

10

fc8647105b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc8647105b41a557a242de3f50d6c2f4_JaffaCakes118

  • Size

    21KB

  • Sample

    240928-r5zl4a1dmp

  • MD5

    fc8647105b41a557a242de3f50d6c2f4

  • SHA1

    4bb854369a505ac2ac601b83772a6a98bd66f107

  • SHA256

    72cc07a6b10df3773b59b263c1176e09efea77a2679dd45c14d4526a2e50f8f2

  • SHA512

    a33729fd5cdfa8a672185fe91cebfedbc48d0b103c197f166232ac0de040130210d44434ddf70b2374705ad77971f098d09afa0d9b60587c50f17b5398e11d27

  • SSDEEP

    384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUESy3Cc:SCIqdH/k1ZVcT194jp4E3t

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      fc8647105b41a557a242de3f50d6c2f4_JaffaCakes118

    • Size

      21KB

    • MD5

      fc8647105b41a557a242de3f50d6c2f4

    • SHA1

      4bb854369a505ac2ac601b83772a6a98bd66f107

    • SHA256

      72cc07a6b10df3773b59b263c1176e09efea77a2679dd45c14d4526a2e50f8f2

    • SHA512

      a33729fd5cdfa8a672185fe91cebfedbc48d0b103c197f166232ac0de040130210d44434ddf70b2374705ad77971f098d09afa0d9b60587c50f17b5398e11d27

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUESy3Cc:SCIqdH/k1ZVcT194jp4E3t

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks