Overview

overview

10

Static

static

10

963039ddd1...18.exe

windows7-x64

10

963039ddd1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    963039ddd1f4f67fdb2eeea78c75b04e_JaffaCakes118

  • Size

    28KB

  • Sample

    241124-v435nsxkaq

  • MD5

    963039ddd1f4f67fdb2eeea78c75b04e

  • SHA1

    d5370fa569dec41b66f80c19287fb6e37860827b

  • SHA256

    6239abbb249e02a558f3bf63389bbc93bc774fd83dc699f7c9181c08aa38cce9

  • SHA512

    cfc2d5bbe4874b491042d5a6628976697cb3caa4e7d598a545a42140cb4265e10881f18fb3576fc10e9d8e7763fc7bad9dd7f5818d2519a8fad19b6c38404cff

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNKMx:Dv8IRRdsxq1DjJcqfL0

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      963039ddd1f4f67fdb2eeea78c75b04e_JaffaCakes118

    • Size

      28KB

    • MD5

      963039ddd1f4f67fdb2eeea78c75b04e

    • SHA1

      d5370fa569dec41b66f80c19287fb6e37860827b

    • SHA256

      6239abbb249e02a558f3bf63389bbc93bc774fd83dc699f7c9181c08aa38cce9

    • SHA512

      cfc2d5bbe4874b491042d5a6628976697cb3caa4e7d598a545a42140cb4265e10881f18fb3576fc10e9d8e7763fc7bad9dd7f5818d2519a8fad19b6c38404cff

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNKMx:Dv8IRRdsxq1DjJcqfL0

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks