Overview

overview

10

Static

static

5

JaffaCakes...30.exe

windows7-x64

10

JaffaCakes...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6ac906d0035c1550b8888c78c2320b30

  • Size

    48KB

  • Sample

    250103-g9cb9asnaz

  • MD5

    6ac906d0035c1550b8888c78c2320b30

  • SHA1

    e598dccf29db74ae3082034bf3b11802df03769f

  • SHA256

    2084991a5336c2aa5bbf638514f019447590d4d1bb6dcb24690e30bd99754924

  • SHA512

    010cd807abd5a2b783c941d95581169fd206ffefaca38aa4ccdc02ef36f6b7b68bb6d533fa74149d9982b818d977e34b17abff5f338b2adee088a5027067557c

  • SSDEEP

    768:jv8IRRdsxq1DjJcqOVBLUvTd2wmDkuBgs5vY2HJvqRTkoCmq1UrHU:DxRTsxq1DjCBBLUrGaeva1CmRrHU

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_6ac906d0035c1550b8888c78c2320b30

    • Size

      48KB

    • MD5

      6ac906d0035c1550b8888c78c2320b30

    • SHA1

      e598dccf29db74ae3082034bf3b11802df03769f

    • SHA256

      2084991a5336c2aa5bbf638514f019447590d4d1bb6dcb24690e30bd99754924

    • SHA512

      010cd807abd5a2b783c941d95581169fd206ffefaca38aa4ccdc02ef36f6b7b68bb6d533fa74149d9982b818d977e34b17abff5f338b2adee088a5027067557c

    • SSDEEP

      768:jv8IRRdsxq1DjJcqOVBLUvTd2wmDkuBgs5vY2HJvqRTkoCmq1UrHU:DxRTsxq1DjCBBLUrGaeva1CmRrHU

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks