Overview

overview

10

Static

static

10

e1b4b84bcb...18.exe

windows7-x64

10

e1b4b84bcb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b4b84bcb50c4da90ea2fa39be1830e_JaffaCakes118

  • Size

    49KB

  • Sample

    241211-qwfxysvkcw

  • MD5

    e1b4b84bcb50c4da90ea2fa39be1830e

  • SHA1

    f9f7911bc7e350839f80b9f11209d4c97e0b44f7

  • SHA256

    e8b56b2153740cc5269a7197af4bb7216bc95072f1bcaa9ae7dfd7563c537304

  • SHA512

    2ec49d4f40013d700e10af712d51d3267625f80159d5b70fa0052ae3fea1c509b06ab2bd9d3ded0c5098678460b3470cc649eaebd2dfa8df4a1e01e3d11f2c71

  • SSDEEP

    768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4Cd17LzHlt:n87wc1aGNC0klI7CPpIFa6817Xj

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      e1b4b84bcb50c4da90ea2fa39be1830e_JaffaCakes118

    • Size

      49KB

    • MD5

      e1b4b84bcb50c4da90ea2fa39be1830e

    • SHA1

      f9f7911bc7e350839f80b9f11209d4c97e0b44f7

    • SHA256

      e8b56b2153740cc5269a7197af4bb7216bc95072f1bcaa9ae7dfd7563c537304

    • SHA512

      2ec49d4f40013d700e10af712d51d3267625f80159d5b70fa0052ae3fea1c509b06ab2bd9d3ded0c5098678460b3470cc649eaebd2dfa8df4a1e01e3d11f2c71

    • SSDEEP

      768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4Cd17LzHlt:n87wc1aGNC0klI7CPpIFa6817Xj

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks