General

  • Target

    JaffaCakes118_6395686fecfd8d08713842e86267db50

  • Size

    28KB

  • Sample

    250102-jkm4ka1pct

  • MD5

    6395686fecfd8d08713842e86267db50

  • SHA1

    971e7824d2c5498f03f59cd69d60fbac4c8ab9a1

  • SHA256

    24549252ed0a726a79b0e75fa02e3e61e13c189b085d2f87dc606ceed95062ac

  • SHA512

    b9d3322e910b009ecabef979da45eb6a3aa0764eb663ea19205faca1378418974f97b379d91ffc98d9518d72a5e83ad1eaca1809108e6204adcc2f177657102f

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN0zhKGfp:Dv8IRRdsxq1DjJcqfJzz

Malware Config

Targets

    • Target

      JaffaCakes118_6395686fecfd8d08713842e86267db50

    • Size

      28KB

    • MD5

      6395686fecfd8d08713842e86267db50

    • SHA1

      971e7824d2c5498f03f59cd69d60fbac4c8ab9a1

    • SHA256

      24549252ed0a726a79b0e75fa02e3e61e13c189b085d2f87dc606ceed95062ac

    • SHA512

      b9d3322e910b009ecabef979da45eb6a3aa0764eb663ea19205faca1378418974f97b379d91ffc98d9518d72a5e83ad1eaca1809108e6204adcc2f177657102f

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN0zhKGfp:Dv8IRRdsxq1DjJcqfJzz

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks