Overview

overview

10

Static

static

10

ed6ba59892...18.exe

windows7-x64

10

ed6ba59892...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed6ba59892b5aa9c63cfddfb9815772f_JaffaCakes118

  • Size

    49KB

  • Sample

    241214-g4vlmstqdv

  • MD5

    ed6ba59892b5aa9c63cfddfb9815772f

  • SHA1

    79c41b8058b148bc1728abd19fabc35f5993c606

  • SHA256

    b8a494049c320a9a9f8ede38b7ea0c4f4f2e210fb3bb0500e75602ec03ac186c

  • SHA512

    15d5c7b977b1f1659fd7b987946774b0f10a37afcc1414b20b764a8daf5cae001be114e85e6f7912507e703751ca37f0a1a5a71576101cbd25e11db57e319e76

  • SSDEEP

    1536:SNqaLV8a6KgcQsohc7tXLDEOifcEU56h9jHtY:SNqMNgcQsGQtXJX29jtY

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      ed6ba59892b5aa9c63cfddfb9815772f_JaffaCakes118

    • Size

      49KB

    • MD5

      ed6ba59892b5aa9c63cfddfb9815772f

    • SHA1

      79c41b8058b148bc1728abd19fabc35f5993c606

    • SHA256

      b8a494049c320a9a9f8ede38b7ea0c4f4f2e210fb3bb0500e75602ec03ac186c

    • SHA512

      15d5c7b977b1f1659fd7b987946774b0f10a37afcc1414b20b764a8daf5cae001be114e85e6f7912507e703751ca37f0a1a5a71576101cbd25e11db57e319e76

    • SSDEEP

      1536:SNqaLV8a6KgcQsohc7tXLDEOifcEU56h9jHtY:SNqMNgcQsGQtXJX29jtY

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks