Overview

overview

10

Static

static

10

JaffaCakes...4a.exe

windows7-x64

10

JaffaCakes...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_61d59148c15f243edf669ef9c6fc394a

  • Size

    21KB

  • Sample

    250102-bv61eswjht

  • MD5

    61d59148c15f243edf669ef9c6fc394a

  • SHA1

    153a7326d49169b2e658dd510c9b75930b8ef393

  • SHA256

    539f29fd86b38701e5b146bd6ef54b47e67bc76fcb9eecfb5f752dd6eb708a65

  • SHA512

    28609eaa4788fbe1f468b58aaf6b61e4d3fd62930fdd4248cf324195d1cc815f235bec84b57117bf67f21215ae7b2ae8cfc676a3232c76e715d5fa5370b378c9

  • SSDEEP

    384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUz:SCIqdH/k1ZVcT194jp4z

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_61d59148c15f243edf669ef9c6fc394a

    • Size

      21KB

    • MD5

      61d59148c15f243edf669ef9c6fc394a

    • SHA1

      153a7326d49169b2e658dd510c9b75930b8ef393

    • SHA256

      539f29fd86b38701e5b146bd6ef54b47e67bc76fcb9eecfb5f752dd6eb708a65

    • SHA512

      28609eaa4788fbe1f468b58aaf6b61e4d3fd62930fdd4248cf324195d1cc815f235bec84b57117bf67f21215ae7b2ae8cfc676a3232c76e715d5fa5370b378c9

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUz:SCIqdH/k1ZVcT194jp4z

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks