Overview

overview

10

Static

static

10

dedfded985...18.exe

windows7-x64

10

dedfded985...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dedfded985917b0ae25c884edea9abd4_JaffaCakes118

  • Size

    28KB

  • Sample

    241210-215mnaymhr

  • MD5

    dedfded985917b0ae25c884edea9abd4

  • SHA1

    738c41468491d1085215124229a6abccb40ad4b7

  • SHA256

    76f0883338652387445688c46e22e850f1e013a2e6c09f2a99864c576bdb96ce

  • SHA512

    b71439ae4f6532014594ebd290d75d3350cca5a900caad01490ba53de4c8b6b7a4fc5cd4b610d119f083ce0fd1149f17ef5854fb4a705a7a854896e78ff3ad66

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNsQMtL2:Dv8IRRdsxq1DjJcqfhXi

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      dedfded985917b0ae25c884edea9abd4_JaffaCakes118

    • Size

      28KB

    • MD5

      dedfded985917b0ae25c884edea9abd4

    • SHA1

      738c41468491d1085215124229a6abccb40ad4b7

    • SHA256

      76f0883338652387445688c46e22e850f1e013a2e6c09f2a99864c576bdb96ce

    • SHA512

      b71439ae4f6532014594ebd290d75d3350cca5a900caad01490ba53de4c8b6b7a4fc5cd4b610d119f083ce0fd1149f17ef5854fb4a705a7a854896e78ff3ad66

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNsQMtL2:Dv8IRRdsxq1DjJcqfhXi

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks