Overview

overview

10

Static

static

10

JaffaCakes...62.exe

windows7-x64

10

JaffaCakes...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1acf75020af7618eeb0c39dfa303c662

  • Size

    66KB

  • Sample

    241231-pgcfjsslfj

  • MD5

    1acf75020af7618eeb0c39dfa303c662

  • SHA1

    99e2f1af2951b36103888d5fa209cff1dd3abc8d

  • SHA256

    0c5ca4d7111081820e7dded370d91e07f62d145fe9e8c5b39b45e9957ff0aff1

  • SHA512

    8c600ec09f2481ec5277ba52740a5c9a222a54ded8f584c486df8f6134e58d118b0ea9a4fd49e0a1d94785226787418d433acf67212f4d3f578783c48c981b9b

  • SSDEEP

    768:Y/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfy2L62Lv:Y/qk/Zdic/qjh8MJDH++vC/E6Ev

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_1acf75020af7618eeb0c39dfa303c662

    • Size

      66KB

    • MD5

      1acf75020af7618eeb0c39dfa303c662

    • SHA1

      99e2f1af2951b36103888d5fa209cff1dd3abc8d

    • SHA256

      0c5ca4d7111081820e7dded370d91e07f62d145fe9e8c5b39b45e9957ff0aff1

    • SHA512

      8c600ec09f2481ec5277ba52740a5c9a222a54ded8f584c486df8f6134e58d118b0ea9a4fd49e0a1d94785226787418d433acf67212f4d3f578783c48c981b9b

    • SSDEEP

      768:Y/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfy2L62Lv:Y/qk/Zdic/qjh8MJDH++vC/E6Ev

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks