Overview

overview

10

Static

static

10

f95be6e782...18.exe

windows7-x64

10

f95be6e782...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f95be6e782a5ebeea81c5708b8dcbadc_JaffaCakes118

  • Size

    28KB

  • Sample

    241218-agpcsatne1

  • MD5

    f95be6e782a5ebeea81c5708b8dcbadc

  • SHA1

    7b4debbf804d7d742b78e5f9320f114078a192d1

  • SHA256

    94b12575d6dd6a38004bdf9058b477614a1f65ca101388c0323dedc9085a6767

  • SHA512

    9cb4c3a47219a6abe8bf57ea0ca9c5f1e6375e27b3b9ecda5dc03d1d6c2bbc34bfec68f9fa2ba16ccaef06145cea6b65b5e5ba329d0fedafa21c3cd5386e90c5

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNvM:Dv8IRRdsxq1DjJcqfcM

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      f95be6e782a5ebeea81c5708b8dcbadc_JaffaCakes118

    • Size

      28KB

    • MD5

      f95be6e782a5ebeea81c5708b8dcbadc

    • SHA1

      7b4debbf804d7d742b78e5f9320f114078a192d1

    • SHA256

      94b12575d6dd6a38004bdf9058b477614a1f65ca101388c0323dedc9085a6767

    • SHA512

      9cb4c3a47219a6abe8bf57ea0ca9c5f1e6375e27b3b9ecda5dc03d1d6c2bbc34bfec68f9fa2ba16ccaef06145cea6b65b5e5ba329d0fedafa21c3cd5386e90c5

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNvM:Dv8IRRdsxq1DjJcqfcM

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks