Overview

overview

10

Static

static

10

pahocker@r... .exe

windows7-x64

10

pahocker@r... .exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8c2567664cbce21c5d77d8a73ddaa10_JaffaCakes118

  • Size

    28KB

  • Sample

    241212-3b77xs1jex

  • MD5

    e8c2567664cbce21c5d77d8a73ddaa10

  • SHA1

    2d413e0bb337a37f9bab3182b6d5f8f617127026

  • SHA256

    a9175b5c443da296d3ce5b0f80b1597f77e16a412992a059bf6c4d691512eee4

  • SHA512

    c449abb4dcf328da6d687cb56448a21549b60b87452fb944e15edb0e848d524bc3cb149d8b7a2ed30f3386152d7a270c383b9fe463a786372f6d0dc78978ff4e

  • SSDEEP

    384:KvxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNp9V:Mv8IRRdsxq1DjJcqfyV

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      [email protected] .pif

    • Size

      28KB

    • MD5

      c5c0377e70d400bc42cc0d10655d8919

    • SHA1

      2692dcb2b970168b6049d1772e30d64911a582e3

    • SHA256

      8f6535687f9a3f04500685c49fc32e2e36bbb3d7952ff3f3f7adb58d841f2045

    • SHA512

      7be705adbea072fdb2deeefa81e29f094d961f4c707e177c5bed9ee1f6153ea4694c610193f37f94a25c4017a5100fbc17f620518f0aa03df7430f4788d37e05

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNp95:Dv8IRRdsxq1DjJcqfy5

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks