Overview

overview

10

Static

static

10

e113efaa64...18.exe

windows7-x64

10

e113efaa64...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e113efaa642aa7b41ab4a1a1add2962c_JaffaCakes118

  • Size

    50KB

  • Sample

    241211-mrdp9ayqex

  • MD5

    e113efaa642aa7b41ab4a1a1add2962c

  • SHA1

    c3ef7ada6fd73f035e2c42647a643fd72f5ed404

  • SHA256

    658f5593e2b81cdd9c0141437fd3444a5db4ed69a859c71dd691f289fbe047e6

  • SHA512

    86a51c632c80e5686c7e8d440fd46df52828b429e224ebd74385ddf62dbc664f62e29f7b1261bf9cc3e8f9cb3fb3d8ecd558b869a02f9ef6899e096495552e36

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4Zn5eTae194ux+6OOe6rk7NKwuZAghQTJWiKin1fI:SNqaLV8a6Z57e1rxFOZ6Cbg2ITMtI

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      e113efaa642aa7b41ab4a1a1add2962c_JaffaCakes118

    • Size

      50KB

    • MD5

      e113efaa642aa7b41ab4a1a1add2962c

    • SHA1

      c3ef7ada6fd73f035e2c42647a643fd72f5ed404

    • SHA256

      658f5593e2b81cdd9c0141437fd3444a5db4ed69a859c71dd691f289fbe047e6

    • SHA512

      86a51c632c80e5686c7e8d440fd46df52828b429e224ebd74385ddf62dbc664f62e29f7b1261bf9cc3e8f9cb3fb3d8ecd558b869a02f9ef6899e096495552e36

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4Zn5eTae194ux+6OOe6rk7NKwuZAghQTJWiKin1fI:SNqaLV8a6Z57e1rxFOZ6Cbg2ITMtI

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks