Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-01-2025 00:08
General
-
Target
JaffaCakes118_61773982e6bcc45b6fa54b3b96bd168f.exe
-
Size
28KB
-
MD5
61773982e6bcc45b6fa54b3b96bd168f
-
SHA1
81eb98cdee761c543bda4359d0d7d32ad8465337
-
SHA256
53344bf82caffcf33f0daadd1d3ba30e577e40fd4e423a9569f0f1f826660e8b
-
SHA512
eab56031391bbc0dd49e56e644ea4dd7e746b5a7a43331a54f3d5777c3aebb9629349a9ee24d4f0a09ebecec6fcc94560903902fa47fc5bb4b757473948b7bb2
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZIad:Dv8IRRdsxq1DjJcqfQ
Malware Config
Signatures
-
Detects MyDoom family 6 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_61773982e6bcc45b6fa54b3b96bd168f.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_61773982e6bcc45b6fa54b3b96bd168f.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
1KB
MD5a898dce6a0345767d76eff6d31774f43
SHA159bf15c49ad34ed4b778fb41bf3cdb6eafa5b852
SHA256c6c9dad6d7b97652bcbf04c6bf1dc15745398980fdc6626979f4cf9004580bbe
SHA5122abcb525c0177f6d2eb248814d4c8dd85b5f7cc13743ee2a6868afb7272aca7e267a01f38fd78753a093d91505430c24139ddcd7d9aeeb50a26897558f9f738a
-
Filesize
28KB
MD5d050cab3ce8759bba4fa14fbf6efa2f7
SHA116aa4f3bc5fa6295785d23e0e4c2450272d07152
SHA25605e2aec1fd03ea22465a2d29d2d1c15d6708988a56c984dfd8e9b3167fa37c2e
SHA512e74b605b0d1204c5e35b0623b9caaf72fef9bfc6d0d98c6e0992d5754ddd16c0d97bd0f93a834504fdebde07735ddffb1a2b7dc832b5ad342cf79f9057d1078f
-
Filesize
1KB
MD5d3559f4b0fc4501ac08b15337ca96723
SHA1ba45c4506627e6acabb3b7a5cd068b4637f44eea
SHA25697189969b6e984d9f11505d2123c73c0c346a313d67a15d7c86f46c5a3714dcb
SHA512a3331dc6a0352c313c8f737cf744e60fb47d4f48ba09557a67d863103a3002d37fe6fea147ed98e1dbc851c4c0e2bc1e3dfa12c3a4d530053df4772869146f77
-
Filesize
1KB
MD5184ad5d56c946631a1ce3741d27288b0
SHA1ce2405ef84bb88f31b42b421436c204e47734f38
SHA2567d911c947dc4b4eab5fc535b0cac1c448c413a33886203a24bd25dd625a808d4
SHA512f55adbeadcb09ad093565b4cd90b829495c07fe2cfbdd4b202ecbdedb55800fb906a1bdf636b4c86c255491398fdcb5f00838fdfa38c841f23d769c62d070661
-
Filesize
1KB
MD53c01bc97aff2ceb35a010dbb53b4df8a
SHA15b00dbf535d28f41866b6d6e8a4296b4745930da
SHA2564304ee77231e79f0251cedea8203f98c3c9528b3000b6c9afedccaaac884ae4d
SHA512bf9c34d765fe8bdaf3aa61e38dc0759700c312970328bcef2d8624da846bf98a00b73a08f021a29844d5e21e08626c37cdd3fdc93332a6d5b5b1d0d425ffb521
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB