Overview

overview

10

Static

static

10

letter.htm.exe

windows7-x64

10

letter.htm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_630484a590077252767e83aa517ed950

  • Size

    28KB

  • Sample

    250102-gf14hsyner

  • MD5

    630484a590077252767e83aa517ed950

  • SHA1

    598b169f332c7c8d899108e58a09d28d73c7d230

  • SHA256

    034a572203841a99de9b3df6ec8a928d5a432c7586f646f3875bb735410ebd7a

  • SHA512

    b940d62cb29e774d17b5a460850d3f3ac061965d1fbbd6c749ed20e775a5083513b6661a18866f1db9abd62a293907a4c9845e2223ce26cb37adae5453331a5c

  • SSDEEP

    384:kvxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNphW:Cv8IRRdsxq1DjJcqf4M

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      letter.htm .exe

    • Size

      28KB

    • MD5

      14e6f2c43d8221938a964eeef9dd16f8

    • SHA1

      47c82ca2d8c4566d7847311dc7ce1756a9705caf

    • SHA256

      a095cd103481eb234975df1ee85eb2af7cd07e7eab865dda7795305b395b5dc7

    • SHA512

      cf7240689eb2011c921e0209377ca75dba2c4baf912f2d67f39329b8bf3358ddbe4ab0ae15a7734ddedac1893cb8acf4448f92604e1822a5bfe92db9acf0a9c6

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNphe:Dv8IRRdsxq1DjJcqf4o

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks