General

  • Target

    JaffaCakes118_65093f6aea3b4cdf03db8c8cb1348ee0

  • Size

    42KB

  • Sample

    250102-pg4j2avkcl

  • MD5

    65093f6aea3b4cdf03db8c8cb1348ee0

  • SHA1

    d0426847acb40afe22ff1c6f115ec6cf29642209

  • SHA256

    b3832a3b00e03d0f70fa880b2ce70010c37957fe28d20817d6242dab4350b255

  • SHA512

    e93fc222d7709c5b86ffe0103b691159b5e7a0d029d239761d8755f04662a51397a163da2b573d65751a556bba4bc1cef4011b542304d44f4e3db07b43ca399d

  • SSDEEP

    768:BCIqdH/k1ZVcT194jp4NS7OfZXNTc7NExGlD51y4i:BNqaLV8a6NSifZdo7NExGlqJ

Malware Config

Targets

    • Target

      cdr-co.com.tw

    • Size

      42KB

    • MD5

      b6ec90b4dc6c098e11a4ea1d4197f486

    • SHA1

      3d1fb89e1dfa0752926f9fa5196868c5cbfb6727

    • SHA256

      f23a6575b118de95b0113c018b486cdcac4b4399eedf1d7c5c317e8872dc396b

    • SHA512

      ac13a2efbc049d9d6cb13377a4f0564c4d2e116f7bd010cd2f4c00670b86693ad5826ecbfbd6fb0ca9005fe21d870c3f055f4de280a3233ebb564cccb0726587

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4NS7OfZXNTc7NExGlD51y4F:SNqaLV8a6NSifZdo7NExGlqU

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks