Overview

overview

10

Static

static

10

JaffaCakes...ef.exe

windows7-x64

10

JaffaCakes...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4ab33f7c13e03c3f1877d054e54c0cef

  • Size

    57KB

  • Sample

    250101-hbdyvsxlhy

  • MD5

    4ab33f7c13e03c3f1877d054e54c0cef

  • SHA1

    0c44c41533ff892a077dfc98f079876128d6e06a

  • SHA256

    f61d574eb4cd65bc6130a17d697643c44ac2c6b3abd7e1a624954c9e9676a422

  • SHA512

    1218aa990be030fefba165370c27ba5c2428384d4941c69b8e180dc9f2248ab4eb5ee9b07667a4fd6efd960a49f4cc50efe83730e8b8d0d3e4f39eabd054d7ad

  • SSDEEP

    1536:DNqaLV8a6vd36pwmuZz17TwntR7F1mwtGAWgw55E0BA/:DNqMkdCwmtnn7F1m66Bc

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_4ab33f7c13e03c3f1877d054e54c0cef

    • Size

      57KB

    • MD5

      4ab33f7c13e03c3f1877d054e54c0cef

    • SHA1

      0c44c41533ff892a077dfc98f079876128d6e06a

    • SHA256

      f61d574eb4cd65bc6130a17d697643c44ac2c6b3abd7e1a624954c9e9676a422

    • SHA512

      1218aa990be030fefba165370c27ba5c2428384d4941c69b8e180dc9f2248ab4eb5ee9b07667a4fd6efd960a49f4cc50efe83730e8b8d0d3e4f39eabd054d7ad

    • SSDEEP

      1536:DNqaLV8a6vd36pwmuZz17TwntR7F1mwtGAWgw55E0BA/:DNqMkdCwmtnn7F1m66Bc

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks