General

  • Target

    JaffaCakes118_6a4aa6361a44305b25283bf77637dc20

  • Size

    33KB

  • Sample

    250103-fav5mszlgw

  • MD5

    6a4aa6361a44305b25283bf77637dc20

  • SHA1

    2aab2fb61fdde3aff8a1d85a3096c97182809e86

  • SHA256

    0511997dd870d3a9ed62221cd9edfdc410cb7bd0835a36aef7e21bc4057ca297

  • SHA512

    0c5ea90db56c4109d5ca49aa5714de8475363b8026499354fcacf44cc597585d85eaed5c3e8fa7e9879047241d73f4ebd1459d4d06ca9e6575a855f77f38038f

  • SSDEEP

    768:SCIqdH/k1ZVcT194jp4qqYapNvfSrKfPnnHqF:SNqaLV8a6qqVpNKrKfPKF

Malware Config

Targets

    • Target

      JaffaCakes118_6a4aa6361a44305b25283bf77637dc20

    • Size

      33KB

    • MD5

      6a4aa6361a44305b25283bf77637dc20

    • SHA1

      2aab2fb61fdde3aff8a1d85a3096c97182809e86

    • SHA256

      0511997dd870d3a9ed62221cd9edfdc410cb7bd0835a36aef7e21bc4057ca297

    • SHA512

      0c5ea90db56c4109d5ca49aa5714de8475363b8026499354fcacf44cc597585d85eaed5c3e8fa7e9879047241d73f4ebd1459d4d06ca9e6575a855f77f38038f

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4qqYapNvfSrKfPnnHqF:SNqaLV8a6qqVpNKrKfPKF

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks