Overview

overview

10

Static

static

10

ebe250a6f1...18.exe

windows7-x64

10

ebe250a6f1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebe250a6f17bd7de6fc2976e129d2799_JaffaCakes118

  • Size

    46KB

  • Sample

    241213-rhj8ws1jgv

  • MD5

    ebe250a6f17bd7de6fc2976e129d2799

  • SHA1

    0a3ba88cb70f45dda23f66f386e50735dc2c1d52

  • SHA256

    27401830378d4f59a1980ebbeab86f05960d3f596e7465292f54b88b80c00c95

  • SHA512

    bb4dd4123954893bcacb33ff727f9a5389aab9df1e560c852345c668ce6ef36e4f0ac80901a727d20ba90064ab2fa26d682bb62a565f83d39b3b65b4ee6c2d14

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4IXnX/8KpdiDE3/kAb+OPKvoX:SNqaLV8a68/8wgU+OCvoX

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ebe250a6f17bd7de6fc2976e129d2799_JaffaCakes118

    • Size

      46KB

    • MD5

      ebe250a6f17bd7de6fc2976e129d2799

    • SHA1

      0a3ba88cb70f45dda23f66f386e50735dc2c1d52

    • SHA256

      27401830378d4f59a1980ebbeab86f05960d3f596e7465292f54b88b80c00c95

    • SHA512

      bb4dd4123954893bcacb33ff727f9a5389aab9df1e560c852345c668ce6ef36e4f0ac80901a727d20ba90064ab2fa26d682bb62a565f83d39b3b65b4ee6c2d14

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4IXnX/8KpdiDE3/kAb+OPKvoX:SNqaLV8a68/8wgU+OCvoX

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks