mydoom | 98f16abd48111d10e163526385d1f4600ed6e8a2bbff82466afc1a9531b9716d | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...d0.exe

windows7-x64

JaffaCakes...d0.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_6fa4eded8a3b294e31940c76f4209bd0
Size

34KB
Sample

250103-zx5gdatkcs
MD5

6fa4eded8a3b294e31940c76f4209bd0
SHA1

3ba84a5d02506eec100464742c4014ee6cfeb3fc
SHA256

98f16abd48111d10e163526385d1f4600ed6e8a2bbff82466afc1a9531b9716d
SHA512

ab84ea4b2c363a529f35ecd509aeef11c3d8da27a6887f5eb6e0add433f7f370bbc54bdd9513d582cde83346b8eccf8ac81ec12046ff114aa3fb47b95b4602f2
SSDEEP

768:SCIqdH/k1ZVcT194jp49efKyNDLGwrNbX76FUSK:SNqaLV8a6YH1B776VK

Score

10^/10

mydoom discovery persistence upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_6fa4eded8a3b294e31940c76f4209bd0.exe

Resource

win7-20240708-en

mydoom discovery persistence upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_6fa4eded8a3b294e31940c76f4209bd0.exe

Resource

win10v2004-20241007-en

mydoom discovery persistence upx worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_6fa4eded8a3b294e31940c76f4209bd0
- Size
  
  34KB
- MD5
  
  6fa4eded8a3b294e31940c76f4209bd0
- SHA1
  
  3ba84a5d02506eec100464742c4014ee6cfeb3fc
- SHA256
  
  98f16abd48111d10e163526385d1f4600ed6e8a2bbff82466afc1a9531b9716d
- SHA512
  
  ab84ea4b2c363a529f35ecd509aeef11c3d8da27a6887f5eb6e0add433f7f370bbc54bdd9513d582cde83346b8eccf8ac81ec12046ff114aa3fb47b95b4602f2
- SSDEEP
  
  768:SCIqdH/k1ZVcT194jp49efKyNDLGwrNbX76FUSK:SNqaLV8a6YH1B776VK
Score

10^/10

mydoom discovery persistence upx worm
- Detects MyDoom family
- MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Mydoom family
  mydoom
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mydoomdiscoverypersistenceupxworm

behavioral2

mydoomdiscoverypersistenceupxworm

© 2018-2025

Terms | Privacy