General

  • Target

    JaffaCakes118_6045e6e70a4910bafbcab764182e19ea

  • Size

    28KB

  • Sample

    250101-ya42nazpfv

  • MD5

    6045e6e70a4910bafbcab764182e19ea

  • SHA1

    114be56aa3139658cab78b700494dae019aaed73

  • SHA256

    e3083d1c64c68cb52b92862468826a8409aed5e5fbcd16bd1f1098aeccaf57ad

  • SHA512

    12534a02433cc686155c7bbfc5f0277c85983b380b0bdc3d51225304b98762a6be43d27ede499bd84cf640d125ab374047a390fc1822bfb94b798144ef228fd2

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNUDqp8:Dv8IRRdsxq1DjJcqf7qp8

Malware Config

Targets

    • Target

      JaffaCakes118_6045e6e70a4910bafbcab764182e19ea

    • Size

      28KB

    • MD5

      6045e6e70a4910bafbcab764182e19ea

    • SHA1

      114be56aa3139658cab78b700494dae019aaed73

    • SHA256

      e3083d1c64c68cb52b92862468826a8409aed5e5fbcd16bd1f1098aeccaf57ad

    • SHA512

      12534a02433cc686155c7bbfc5f0277c85983b380b0bdc3d51225304b98762a6be43d27ede499bd84cf640d125ab374047a390fc1822bfb94b798144ef228fd2

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNUDqp8:Dv8IRRdsxq1DjJcqf7qp8

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks