Overview

overview

10

Static

static

10

d18f132a23...18.exe

windows7-x64

10

d18f132a23...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d18f132a23bb976d76d93bc050121cf7_JaffaCakes118

  • Size

    28KB

  • Sample

    241207-kmfmyazrel

  • MD5

    d18f132a23bb976d76d93bc050121cf7

  • SHA1

    77414dcf6283dafedaed114dc9d4ac0f1fa78faa

  • SHA256

    e0a2646a18e16ec859809e60b362f11171722f90baa720bcc83dc8c355f6a490

  • SHA512

    1d8cba39c7756b8ae85ddb18dd93073731b662fa75a23bc8de8dc83201d04f15f86a900f4a9b9a9bcfe4098c65a0a7eaf47786944c945d1fe13bed643fd0319b

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZ:Dv8IRRdsxq1DjJcqfK

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      d18f132a23bb976d76d93bc050121cf7_JaffaCakes118

    • Size

      28KB

    • MD5

      d18f132a23bb976d76d93bc050121cf7

    • SHA1

      77414dcf6283dafedaed114dc9d4ac0f1fa78faa

    • SHA256

      e0a2646a18e16ec859809e60b362f11171722f90baa720bcc83dc8c355f6a490

    • SHA512

      1d8cba39c7756b8ae85ddb18dd93073731b662fa75a23bc8de8dc83201d04f15f86a900f4a9b9a9bcfe4098c65a0a7eaf47786944c945d1fe13bed643fd0319b

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZ:Dv8IRRdsxq1DjJcqfK

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks