Overview

overview

10

Static

static

10

02dbca61e8...18.exe

windows7-x64

10

02dbca61e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02dbca61e8324bf34dfbc1600af058b2_JaffaCakes118

  • Size

    43KB

  • Sample

    240930-xtk78avcje

  • MD5

    02dbca61e8324bf34dfbc1600af058b2

  • SHA1

    4d7e3d66c0bda15b62f3b19cd0267d24285784d0

  • SHA256

    ec33eae49d181498acf110dc80b23eac780dfe22dce11cb49dce92d82618d836

  • SHA512

    b8c55dfa0f7d28c36bc246e1c2e37abdc975d94971c57420c8e5d9c7895a43f3b04884cf7350382f8a9fa6edd248cc34b638dcab3f02e04e241458c510e58b21

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4zjO5gKFrSmgKRfS97snvXXObbWFv:SNqaLV8a6zrKxSnCfS9K/w6

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      02dbca61e8324bf34dfbc1600af058b2_JaffaCakes118

    • Size

      43KB

    • MD5

      02dbca61e8324bf34dfbc1600af058b2

    • SHA1

      4d7e3d66c0bda15b62f3b19cd0267d24285784d0

    • SHA256

      ec33eae49d181498acf110dc80b23eac780dfe22dce11cb49dce92d82618d836

    • SHA512

      b8c55dfa0f7d28c36bc246e1c2e37abdc975d94971c57420c8e5d9c7895a43f3b04884cf7350382f8a9fa6edd248cc34b638dcab3f02e04e241458c510e58b21

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4zjO5gKFrSmgKRfS97snvXXObbWFv:SNqaLV8a6zrKxSnCfS9K/w6

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks