Overview

overview

10

Static

static

10

f904dc9c0e...18.exe

windows7-x64

10

f904dc9c0e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f904dc9c0eac48dac517687b54c5cc3f_JaffaCakes118

  • Size

    28KB

  • Sample

    241217-1xlvpszkas

  • MD5

    f904dc9c0eac48dac517687b54c5cc3f

  • SHA1

    5baeabce447b025b2fbda494ec069e1d901b8047

  • SHA256

    247f987269b2ba83dfe017e7da30865db24d332835289626c18def318312fb39

  • SHA512

    471cb5cd2b7046f883cc50f574e4c82833281dbe7242f6894252af0e55fc5cfff7d3efd4245533fd07f869a05dad3512e35897cd978c760bd21eb42ce50d8240

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZ1lR:Dv8IRRdsxq1DjJcqfUz

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      f904dc9c0eac48dac517687b54c5cc3f_JaffaCakes118

    • Size

      28KB

    • MD5

      f904dc9c0eac48dac517687b54c5cc3f

    • SHA1

      5baeabce447b025b2fbda494ec069e1d901b8047

    • SHA256

      247f987269b2ba83dfe017e7da30865db24d332835289626c18def318312fb39

    • SHA512

      471cb5cd2b7046f883cc50f574e4c82833281dbe7242f6894252af0e55fc5cfff7d3efd4245533fd07f869a05dad3512e35897cd978c760bd21eb42ce50d8240

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZ1lR:Dv8IRRdsxq1DjJcqfUz

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks