mydoom | dfd3bc0bd84d36bf5be9542839eb5f666fa7beb741a77c99ab9b789160140189 | Triage

Submit
Reports

Overview

overview

Static

static

3

f33cc6455f...18.exe

windows7-x64

f33cc6455f...18.exe

windows10-2004-x64

Sharing

General

Target

f33cc6455f3816f3333975a766966d1f_JaffaCakes118
Size

43KB
Sample

241215-ksvzta1maj
MD5

f33cc6455f3816f3333975a766966d1f
SHA1

653eff3ad1fd769e7d89701038a9d5a169b24677
SHA256

dfd3bc0bd84d36bf5be9542839eb5f666fa7beb741a77c99ab9b789160140189
SHA512

4801cec5b2c7a1331b6e08cf3268508d27e83936d29d9cda039deddc02f778cf342120dd975104d9fd63ba7a27b3e1d93fa48e265b4d84629b75814bae561ab7
SSDEEP

768:nX4i4nfpHx8jwyRBYr2/hDIi5f3s+PvAK63kerEIpgbMSmgn2eJKPYuOpUYYDMvx:X4i4fpR8cyV/dlTPvAtprjkMBaDMYuty

Score

10^/10

mydoom discovery persistence worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f33cc6455f3816f3333975a766966d1f_JaffaCakes118.exe

Resource

win7-20241010-en

mydoom discovery persistence worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

f33cc6455f3816f3333975a766966d1f_JaffaCakes118.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence worm

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  f33cc6455f3816f3333975a766966d1f_JaffaCakes118
- Size
  
  43KB
- MD5
  
  f33cc6455f3816f3333975a766966d1f
- SHA1
  
  653eff3ad1fd769e7d89701038a9d5a169b24677
- SHA256
  
  dfd3bc0bd84d36bf5be9542839eb5f666fa7beb741a77c99ab9b789160140189
- SHA512
  
  4801cec5b2c7a1331b6e08cf3268508d27e83936d29d9cda039deddc02f778cf342120dd975104d9fd63ba7a27b3e1d93fa48e265b4d84629b75814bae561ab7
- SSDEEP
  
  768:nX4i4nfpHx8jwyRBYr2/hDIi5f3s+PvAK63kerEIpgbMSmgn2eJKPYuOpUYYDMvx:X4i4fpR8cyV/dlTPvAtprjkMBaDMYuty
Score

10^/10

mydoom discovery persistence worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceworm

behavioral2

mydoomdiscoverypersistenceworm

© 2018-2024

Terms | Privacy