Overview

overview

10

Static

static

10

JaffaCakes...1a.exe

windows7-x64

10

JaffaCakes...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6c4ec8ed9590579fd4537fdf5ff2971a

  • Size

    28KB

  • Sample

    250103-nmy13atpbj

  • MD5

    6c4ec8ed9590579fd4537fdf5ff2971a

  • SHA1

    9aa8151b1578403a5029ba7fb69de4260fc04adf

  • SHA256

    262dfd42c62d373d19f9648199663524db4af52dc3a6157c4f191e6075b25bb7

  • SHA512

    5f99f1cac06c29fc105bf9afa2a22fd49d04a2c89deb252a2726570b4bd47be3d0ee506617a90db49b431003673a9c3033b318256316833b7ea5bf8e3166833e

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN2AaP:Dv8IRRdsxq1DjJcqfPP

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_6c4ec8ed9590579fd4537fdf5ff2971a

    • Size

      28KB

    • MD5

      6c4ec8ed9590579fd4537fdf5ff2971a

    • SHA1

      9aa8151b1578403a5029ba7fb69de4260fc04adf

    • SHA256

      262dfd42c62d373d19f9648199663524db4af52dc3a6157c4f191e6075b25bb7

    • SHA512

      5f99f1cac06c29fc105bf9afa2a22fd49d04a2c89deb252a2726570b4bd47be3d0ee506617a90db49b431003673a9c3033b318256316833b7ea5bf8e3166833e

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN2AaP:Dv8IRRdsxq1DjJcqfPP

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks