Overview

overview

10

Static

static

10

151a6d0b39...18.exe

windows7-x64

10

151a6d0b39...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    151a6d0b39d1c7682161f0e76cb191c7_JaffaCakes118

  • Size

    21KB

  • Sample

    241004-16egzstelg

  • MD5

    151a6d0b39d1c7682161f0e76cb191c7

  • SHA1

    ee56c0dddb88d7db0a3a8f5dca4acc2c02e1a819

  • SHA256

    f2fe0c2e37fb2ea9b2ec0ba59447df461c9a776d03553eb7c5525509f5c7883f

  • SHA512

    4314b60ce3b981383210b909a716087f0444c7e4074bf60c023220295b197ed63221ec80a9ce20857531d31590f97862bb675cbfc03be91f02d9a7fa21d6bd00

  • SSDEEP

    384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUjRf0T:SCIqdH/k1ZVcT194jp4jB0T

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      151a6d0b39d1c7682161f0e76cb191c7_JaffaCakes118

    • Size

      21KB

    • MD5

      151a6d0b39d1c7682161f0e76cb191c7

    • SHA1

      ee56c0dddb88d7db0a3a8f5dca4acc2c02e1a819

    • SHA256

      f2fe0c2e37fb2ea9b2ec0ba59447df461c9a776d03553eb7c5525509f5c7883f

    • SHA512

      4314b60ce3b981383210b909a716087f0444c7e4074bf60c023220295b197ed63221ec80a9ce20857531d31590f97862bb675cbfc03be91f02d9a7fa21d6bd00

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUjRf0T:SCIqdH/k1ZVcT194jp4jB0T

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks