Overview

overview

10

Static

static

10

f197be49aa...18.exe

windows7-x64

10

f197be49aa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f197be49aa57c41d202aa65df0e8ce62_JaffaCakes118

  • Size

    28KB

  • Sample

    241215-bh6h5a1pdm

  • MD5

    f197be49aa57c41d202aa65df0e8ce62

  • SHA1

    9478f2c4ace7aeb988faf1d14cdc01cafe86e70b

  • SHA256

    d34d97102778f0c229066b5480cbae65146fadec6f92b70e3b0cf129cb8b4a40

  • SHA512

    ecd13ead8ae877f27502dfe62e1bfdc8903e1b7a0cbeb355e91bb494046b3cfee0268a06ecb9b3da49a867bab88e3ea4bbdd575f8b76c10d8f041ac2053c3dc8

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNhnUSanLo:Dv8IRRdsxq1DjJcqfydaLo

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      f197be49aa57c41d202aa65df0e8ce62_JaffaCakes118

    • Size

      28KB

    • MD5

      f197be49aa57c41d202aa65df0e8ce62

    • SHA1

      9478f2c4ace7aeb988faf1d14cdc01cafe86e70b

    • SHA256

      d34d97102778f0c229066b5480cbae65146fadec6f92b70e3b0cf129cb8b4a40

    • SHA512

      ecd13ead8ae877f27502dfe62e1bfdc8903e1b7a0cbeb355e91bb494046b3cfee0268a06ecb9b3da49a867bab88e3ea4bbdd575f8b76c10d8f041ac2053c3dc8

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNhnUSanLo:Dv8IRRdsxq1DjJcqfydaLo

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks