Overview

overview

10

Static

static

10

JaffaCakes...aa.exe

windows7-x64

10

JaffaCakes...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_90113f53107c137b6a7eb7b6bef052aa

  • Size

    61KB

  • Sample

    250105-grn84awrep

  • MD5

    90113f53107c137b6a7eb7b6bef052aa

  • SHA1

    7833432c983c471de691b2236d51a29775b5b023

  • SHA256

    d2b685a8458cf4086cac5842366a984f4bb7757560b416778c09d099410a9852

  • SHA512

    bf9678b89d8842ae1170ce5a692e092ba17de09a7f4fed3b4bd88c855ec7ba8d48a50c592adb65c53403b41b4840a4d7dceb0ee6d15de30ee83ca6a4c72c3de1

  • SSDEEP

    768:Y/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfVB:Y/qk/Zdic/qjh8MJDH++vC2B

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_90113f53107c137b6a7eb7b6bef052aa

    • Size

      61KB

    • MD5

      90113f53107c137b6a7eb7b6bef052aa

    • SHA1

      7833432c983c471de691b2236d51a29775b5b023

    • SHA256

      d2b685a8458cf4086cac5842366a984f4bb7757560b416778c09d099410a9852

    • SHA512

      bf9678b89d8842ae1170ce5a692e092ba17de09a7f4fed3b4bd88c855ec7ba8d48a50c592adb65c53403b41b4840a4d7dceb0ee6d15de30ee83ca6a4c72c3de1

    • SSDEEP

      768:Y/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfVB:Y/qk/Zdic/qjh8MJDH++vC2B

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks