Overview

overview

10

Static

static

10

f8ef29d2e8...18.exe

windows7-x64

10

f8ef29d2e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8ef29d2e8bad9ce4311a6adeee3b507_JaffaCakes118

  • Size

    38KB

  • Sample

    241216-pawwlszmb1

  • MD5

    f8ef29d2e8bad9ce4311a6adeee3b507

  • SHA1

    e705e776aec70e20184e936c2fbf0d2b6f55e931

  • SHA256

    77215734514969865e0d9148af02219904c1dd154b673f6c26025fa3e9408fd4

  • SHA512

    80cf873934964742652493ce290638479e0acec31478943b6b03069c2f5cfbd4ab959254b7da1dc3ebc3894a5f36535f6a64d9654ec27a7d8862e963b972e2cb

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4DM/COQMNIhXI3EXwo0LIv:SNqaLV8a6DM//QMWhXI5LY

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      f8ef29d2e8bad9ce4311a6adeee3b507_JaffaCakes118

    • Size

      38KB

    • MD5

      f8ef29d2e8bad9ce4311a6adeee3b507

    • SHA1

      e705e776aec70e20184e936c2fbf0d2b6f55e931

    • SHA256

      77215734514969865e0d9148af02219904c1dd154b673f6c26025fa3e9408fd4

    • SHA512

      80cf873934964742652493ce290638479e0acec31478943b6b03069c2f5cfbd4ab959254b7da1dc3ebc3894a5f36535f6a64d9654ec27a7d8862e963b972e2cb

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4DM/COQMNIhXI3EXwo0LIv:SNqaLV8a6DM//QMWhXI5LY

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks