Overview

overview

10

Static

static

5

f07aee3e25...18.exe

windows7-x64

10

f07aee3e25...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f07aee3e25fa7ab6321043af29eac4e3_JaffaCakes118

  • Size

    48KB

  • Sample

    241214-ywj9davjhk

  • MD5

    f07aee3e25fa7ab6321043af29eac4e3

  • SHA1

    c853b749634aa196871f9dfa2ac2a1a142a1aa11

  • SHA256

    75ad8bca3c51655db9e69dabe9301b9bb32e3cf50d49d98f2a1e238d87e26fc3

  • SHA512

    d509e397790d3f706e843e8897106325c9978a2a8c5531eee8b177da6635d6b37789fb72a8798c9b648097895b835459b4e39959e9c40e68512efeb8fc7458c5

  • SSDEEP

    768:jv8IRRdsxq1DjJcqOVBLUvTd2wmDkuBgs5vY2HJvqRTkoCmq1UrHFfUv:DxRTsxq1DjCBBLUrGaeva1CmRrHhUv

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      f07aee3e25fa7ab6321043af29eac4e3_JaffaCakes118

    • Size

      48KB

    • MD5

      f07aee3e25fa7ab6321043af29eac4e3

    • SHA1

      c853b749634aa196871f9dfa2ac2a1a142a1aa11

    • SHA256

      75ad8bca3c51655db9e69dabe9301b9bb32e3cf50d49d98f2a1e238d87e26fc3

    • SHA512

      d509e397790d3f706e843e8897106325c9978a2a8c5531eee8b177da6635d6b37789fb72a8798c9b648097895b835459b4e39959e9c40e68512efeb8fc7458c5

    • SSDEEP

      768:jv8IRRdsxq1DjJcqOVBLUvTd2wmDkuBgs5vY2HJvqRTkoCmq1UrHFfUv:DxRTsxq1DjCBBLUrGaeva1CmRrHhUv

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks