General

  • Target

    JaffaCakes118_7a7647352f8dad8193cccc28b13ff0f0

  • Size

    21KB

  • Sample

    250104-sz8s9avqat

  • MD5

    7a7647352f8dad8193cccc28b13ff0f0

  • SHA1

    45a522ef694d7a12cca9ef72cf84e9eb6add4de3

  • SHA256

    2b5ad2a717fdebc35924264f790c06c78e80cb41f60de05d4ab4f1b4af2e9adf

  • SHA512

    f4be86cc56db0dc6a40dd22fa531fed35574006cad88d4d252c7e5812c3825a1aa821435ea20c6d68d15e5a56f83ab73ef8b666da705711835e12761997d2871

  • SSDEEP

    384:HZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUTXR:ACIqdH/k1ZVcT194jp4rR

Malware Config

Targets

    • Target

      letter.htm .scr

    • Size

      21KB

    • MD5

      067928dd70d5dd9f93eb1db52d50b616

    • SHA1

      b9cce2e0206f51b0972bf71d5496324de3e2bb48

    • SHA256

      0f07681f79a9e584f5cadfbff32a7ea5b0372f7786de280fe799339d0dc6fb96

    • SHA512

      d98b083ab0e6e95c746975ae5c7d5f81f2f58af9090e6eafcaeff46af4b29af73d1be0024dbd0336d244a3bf64f66184d97355fe16c5a2ae6b04f43be88762fa

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUTX7:SCIqdH/k1ZVcT194jp4r7

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Mydoom family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks