Overview

overview

10

Static

static

10

JaffaCakes...50.exe

windows7-x64

10

JaffaCakes...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_04a6ffd488a5ffe73f730c00190af450

  • Size

    47KB

  • Sample

    241231-e4gzfaxngw

  • MD5

    04a6ffd488a5ffe73f730c00190af450

  • SHA1

    489cd0748907a7aa563e37631ce7015659f32339

  • SHA256

    8ca63eb6007154a0a5a6f41896eae5007e879f8cbb6f88e2f2cd822570b9900a

  • SHA512

    439c3b61e6d106d35135927a149bc69196163bbc38ea54e9cc7b8612537fb4b4465e969e3a731aa9efeda016811ca761bc0d9e078e5130cdfb8045e61e300c0c

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4nMwuyFN3/IB5H5kZMkzs81iPXJEV:SNqaLV8a6nMjyFN3/E/kZMWsPP5S

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_04a6ffd488a5ffe73f730c00190af450

    • Size

      47KB

    • MD5

      04a6ffd488a5ffe73f730c00190af450

    • SHA1

      489cd0748907a7aa563e37631ce7015659f32339

    • SHA256

      8ca63eb6007154a0a5a6f41896eae5007e879f8cbb6f88e2f2cd822570b9900a

    • SHA512

      439c3b61e6d106d35135927a149bc69196163bbc38ea54e9cc7b8612537fb4b4465e969e3a731aa9efeda016811ca761bc0d9e078e5130cdfb8045e61e300c0c

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4nMwuyFN3/IB5H5kZMkzs81iPXJEV:SNqaLV8a6nMjyFN3/E/kZMWsPP5S

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks