Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-01-2025 05:20
General
-
Target
JaffaCakes118_77dbcbca59520dd5898c0b2234c4f990.exe
-
Size
28KB
-
MD5
77dbcbca59520dd5898c0b2234c4f990
-
SHA1
299fb2ff0222c01c71c4c399f72d9c08127f7e65
-
SHA256
bca194ccf06f99525d5755f8bc8aae3b7f33c05080b4d7f6cb8bbe238dc124ec
-
SHA512
4832c93ef30309d6415c00ac2e618e05d32df485c042740d393b87e14d5e3ad2dc547cebce62dd29b76d43aa01925c8a1d3f49531d70f13e9d1a0c177b4f7ba3
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNFA5:Dv8IRRdsxq1DjJcqfWi
Malware Config
Signatures
-
Detects MyDoom family 8 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_77dbcbca59520dd5898c0b2234c4f990.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_77dbcbca59520dd5898c0b2234c4f990.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
313B
MD5ffb72ab4faba49ad441ce07db37dd8b6
SHA1194e13c1c32ebb6e7a1dc912261cbd58a82ff71e
SHA2567bd7c3676e98ddde8e0d5b63dd22cb9379d975bcd1d68884c97565cdd8d03660
SHA512517be20d2442489ce39b48dc7f9f6f13f8c45d02703fb1865071f553d36b2289f5abc26c6089fc0bfad1a41fe318bf4b5a806915c5e45898ac744b7e4ed30257
-
Filesize
28KB
MD578916c94bc0109bd2be0e0885a67ae94
SHA1fde2bf532192fb5e266d40f6f0184931e562b5d4
SHA25648ad05b5b3b094e4fbe17034676438bbdb13a322388bf6debbe9b091ba3ba97f
SHA512b228c81f8a5343c241f09bfe96e1c5abe9fb7d3cb83e8e135fb07d6f75818686dff62a4cdf76409653fe50f26eb44e4b9be0d34d9c80f8a286edeaa3ba0edc3b
-
Filesize
1KB
MD5ab2e5e0e1e1554fd4f59d30ad718ffc7
SHA10f14c86c7d5d7ab11432f4ab16b02f191e4c8c08
SHA2560db20c18ce3aa854490ee0c4716c638204e50cdedbc6c7b04c8e08f3aa5097e8
SHA512fcf22973bd6575e3530d01040722b38c46181d460c1ba504a9123830b6f1631e36747dd341b50e11c36fe0bb800b4a066b6c2845841d9b536b8d65191fe1cfff
-
Filesize
1KB
MD5e071a70b3a4e134c4708b1312789e1a2
SHA1450427fc62f752f92a5979bfc09ac380b07e42f7
SHA256f283b9e7639b2b0734bc39a791fc3ad9331dd64ef33213625fd6c2ccf511aa05
SHA51297adc181dc92b5d32e79c8da26669523677c62003adf9705f184de4ca9c308ac09c0468d190826ccfa6482317524f1ddb686f893a95c708586b917911e866418
-
Filesize
1KB
MD59b7cfc8ebf215a0329b4bd1b562aca25
SHA17c029b510bf3d842b8c4453171779cbce16d4b8b
SHA2563c3033cfa644d7755a77bac5be66e2d415c812e3924197012060788db999b68b
SHA5124d4ab81045f02b0fa7a64810af089a6f1dcc2a7fc8dc096562554505c909f64616f54866562105eb1b6e737f37347a61d995ea4a61ac733993369a6b606ff262
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB