mydoom | bbafea07c8b85ccaf39e275e7845eedefdd50a4cacc7ec7882052f2fb09c4e89 | Triage

Submit
Reports

Overview

overview

Static

static

cc6cc69e0b...18.exe

windows7-x64

cc6cc69e0b...18.exe

windows10-2004-x64

Sharing

General

Target

cc6cc69e0b47921d924299f039d91058_JaffaCakes118
Size

46KB
Sample

241206-l51lhaskbz
MD5

cc6cc69e0b47921d924299f039d91058
SHA1

6872b38857f993d00ee02fd1484ef8855b20a0b8
SHA256

bbafea07c8b85ccaf39e275e7845eedefdd50a4cacc7ec7882052f2fb09c4e89
SHA512

2c1d47fae39c6960cbb4f8e27c88f2971d4201213cfb89c942df023ccd4cf82fc09925715dfdb736c94a1502a3f2fd4c6f4a4f65370da57b857d3e2a4d9869d0
SSDEEP

768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4gnz:n87wc1aGNC0klI7CPpIFa6gz

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

cc6cc69e0b47921d924299f039d91058_JaffaCakes118.exe

Resource

win7-20240729-en

mydoom discovery persistence upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

cc6cc69e0b47921d924299f039d91058_JaffaCakes118.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  cc6cc69e0b47921d924299f039d91058_JaffaCakes118
- Size
  
  46KB
- MD5
  
  cc6cc69e0b47921d924299f039d91058
- SHA1
  
  6872b38857f993d00ee02fd1484ef8855b20a0b8
- SHA256
  
  bbafea07c8b85ccaf39e275e7845eedefdd50a4cacc7ec7882052f2fb09c4e89
- SHA512
  
  2c1d47fae39c6960cbb4f8e27c88f2971d4201213cfb89c942df023ccd4cf82fc09925715dfdb736c94a1502a3f2fd4c6f4a4f65370da57b857d3e2a4d9869d0
- SSDEEP
  
  768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4gnz:n87wc1aGNC0klI7CPpIFa6gz
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2025

Terms | Privacy