Overview

overview

10

Static

static

10

JaffaCakes...36.exe

windows7-x64

10

JaffaCakes...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6734d8ec962d3d8e1e80d748202d4b36

  • Size

    38KB

  • Sample

    250102-wz6knstmhm

  • MD5

    6734d8ec962d3d8e1e80d748202d4b36

  • SHA1

    af87c987a984cc526ca25d5a9a8c971fda0db3f7

  • SHA256

    548ee0cbf2576c68507a3a6c2bcf93d48bd8e07f3b1f15e439860081308ee40f

  • SHA512

    c4c6de287a9175c716634fd3fe1e9d495facad2fb0983b456b1e1954941db9305656197cfee93eae8c99ed30e7ec2244d381141b5484db979a3be1ecd040aac6

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4jLBnb63bOplSkSkE26mNWZXVVwMVdDngU:SNqaLV8a6jZ+3bySkmfmNWrVwY1gU

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_6734d8ec962d3d8e1e80d748202d4b36

    • Size

      38KB

    • MD5

      6734d8ec962d3d8e1e80d748202d4b36

    • SHA1

      af87c987a984cc526ca25d5a9a8c971fda0db3f7

    • SHA256

      548ee0cbf2576c68507a3a6c2bcf93d48bd8e07f3b1f15e439860081308ee40f

    • SHA512

      c4c6de287a9175c716634fd3fe1e9d495facad2fb0983b456b1e1954941db9305656197cfee93eae8c99ed30e7ec2244d381141b5484db979a3be1ecd040aac6

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4jLBnb63bOplSkSkE26mNWZXVVwMVdDngU:SNqaLV8a6jZ+3bySkmfmNWrVwY1gU

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks