Overview

overview

10

Static

static

10

JaffaCakes...cb.exe

windows7-x64

10

JaffaCakes...cb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_138de3b2d58d8707c70d4d2b526da4cb

  • Size

    21KB

  • Sample

    241231-l5jb8avqfz

  • MD5

    138de3b2d58d8707c70d4d2b526da4cb

  • SHA1

    4dbe3f47da7d0f1df88a6918f26aa72e8761f3df

  • SHA256

    af643f9b8e67bd9f6a3563357c4672c9cddfd7231d6ee563a02d7f1e4c07196e

  • SHA512

    8b62edd85ca3a5e53663f3ee6804a9f38c0fce6cb537dfc4acc206202dac72cf5432d8ebbe613d0c7694599d172928d467a10b0dcf0b1ac20d052b6e6365941f

  • SSDEEP

    384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUwo46en:SCIqdH/k1ZVcT194jp4wo46+

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_138de3b2d58d8707c70d4d2b526da4cb

    • Size

      21KB

    • MD5

      138de3b2d58d8707c70d4d2b526da4cb

    • SHA1

      4dbe3f47da7d0f1df88a6918f26aa72e8761f3df

    • SHA256

      af643f9b8e67bd9f6a3563357c4672c9cddfd7231d6ee563a02d7f1e4c07196e

    • SHA512

      8b62edd85ca3a5e53663f3ee6804a9f38c0fce6cb537dfc4acc206202dac72cf5432d8ebbe613d0c7694599d172928d467a10b0dcf0b1ac20d052b6e6365941f

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUwo46en:SCIqdH/k1ZVcT194jp4wo46+

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks