mydoom | 4006d61b9062297cec77f177938341e2bbef0c81df5eb214db683a71dac44ee6 | Triage

Submit
Reports

Overview

overview

Static

static

3b46cec856...18.exe

windows7-x64

3b46cec856...18.exe

windows10-2004-x64

Sharing

General

Target

3b46cec85672372196c603cf0bf51037_JaffaCakes118
Size

28KB
Sample

241012-v9df7ssfke
MD5

3b46cec85672372196c603cf0bf51037
SHA1

f710611d4be87a69ce0e50b68049c0c99c507586
SHA256

4006d61b9062297cec77f177938341e2bbef0c81df5eb214db683a71dac44ee6
SHA512

ac5b60bfedcf37eea8d5a19fdefb615d1c9839ad0c73475914d8889a6cf97815cfeaac72606ff7d3df1e0be3b4200f55ff886ee36403d93d54a3a9bf5bd5c2b7
SSDEEP

384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNeTq:Dv8IRRdsxq1DjJcqfJq

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

3b46cec85672372196c603cf0bf51037_JaffaCakes118.exe

Resource

win7-20240903-en

mydoom discovery persistence upx worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

3b46cec85672372196c603cf0bf51037_JaffaCakes118.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  3b46cec85672372196c603cf0bf51037_JaffaCakes118
- Size
  
  28KB
- MD5
  
  3b46cec85672372196c603cf0bf51037
- SHA1
  
  f710611d4be87a69ce0e50b68049c0c99c507586
- SHA256
  
  4006d61b9062297cec77f177938341e2bbef0c81df5eb214db683a71dac44ee6
- SHA512
  
  ac5b60bfedcf37eea8d5a19fdefb615d1c9839ad0c73475914d8889a6cf97815cfeaac72606ff7d3df1e0be3b4200f55ff886ee36403d93d54a3a9bf5bd5c2b7
- SSDEEP
  
  384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNeTq:Dv8IRRdsxq1DjJcqfJq
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2025

Terms | Privacy