Overview

overview

10

Static

static

10

JaffaCakes...b8.exe

windows7-x64

10

JaffaCakes...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7d21c2d75cbd1132926aef4e124a1eb8

  • Size

    28KB

  • Sample

    250104-3kelzavnak

  • MD5

    7d21c2d75cbd1132926aef4e124a1eb8

  • SHA1

    73948945314abc1dc3ccc6c15bb4cdb972236c35

  • SHA256

    1fcdb5351a315b0ee7bc6eea2433d1d50783f368ae8de3fd5f7b99b36a1494d4

  • SHA512

    47a756f4aae6034c7929d51dc77a73b1e1ed11956c9d3271e19ad5b83cff6f810460a86fcb884bd0496ac6ceaf6db7f9f988797ede1d0e773356422c0342d304

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNvTJn:Dv8IRRdsxq1DjJcqfSn

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_7d21c2d75cbd1132926aef4e124a1eb8

    • Size

      28KB

    • MD5

      7d21c2d75cbd1132926aef4e124a1eb8

    • SHA1

      73948945314abc1dc3ccc6c15bb4cdb972236c35

    • SHA256

      1fcdb5351a315b0ee7bc6eea2433d1d50783f368ae8de3fd5f7b99b36a1494d4

    • SHA512

      47a756f4aae6034c7929d51dc77a73b1e1ed11956c9d3271e19ad5b83cff6f810460a86fcb884bd0496ac6ceaf6db7f9f988797ede1d0e773356422c0342d304

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNvTJn:Dv8IRRdsxq1DjJcqfSn

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks