General

  • Target

    91a4e36528cbf98d2b0c834fd76f9648_JaffaCakes118

  • Size

    56KB

  • Sample

    241124-a77l2svrat

  • MD5

    91a4e36528cbf98d2b0c834fd76f9648

  • SHA1

    15c0906356fcf8e98f16673e6e235b792cfb33be

  • SHA256

    ef3a7dd212b5fef05d3310a817773b1d45d0a48710e7af0c2e625076f6999b9a

  • SHA512

    950d3691092cd45a26612b4444633bb88b3361cd08909c31690d2dafc7528cf39b24eda7f2e8dab03112ea872cceb5217c08ecb88f77785316334ab086c3e01d

  • SSDEEP

    1536:SNqaLV8a6Df0EBD/0BHg+fN8peKfqLDKoWU:SNqMS7CrfCp9f4DKoN

Malware Config

Targets

    • Target

      91a4e36528cbf98d2b0c834fd76f9648_JaffaCakes118

    • Size

      56KB

    • MD5

      91a4e36528cbf98d2b0c834fd76f9648

    • SHA1

      15c0906356fcf8e98f16673e6e235b792cfb33be

    • SHA256

      ef3a7dd212b5fef05d3310a817773b1d45d0a48710e7af0c2e625076f6999b9a

    • SHA512

      950d3691092cd45a26612b4444633bb88b3361cd08909c31690d2dafc7528cf39b24eda7f2e8dab03112ea872cceb5217c08ecb88f77785316334ab086c3e01d

    • SSDEEP

      1536:SNqaLV8a6Df0EBD/0BHg+fN8peKfqLDKoWU:SNqMS7CrfCp9f4DKoN

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks