Overview

overview

10

Static

static

10

JaffaCakes...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a7fdbbf9e42ba60dd30c40f3a5dfd563

  • Size

    28KB

  • Sample

    250410-c9aq7sypw9

  • MD5

    a7fdbbf9e42ba60dd30c40f3a5dfd563

  • SHA1

    423c8544fce079d290d717e0e0d7410cd742a0c6

  • SHA256

    24977c8f7666cee481c55c9eafcd8d98f03b0f354d692fc17cb7deb618b76ec7

  • SHA512

    4ae93ccbc93f1c02a73ffa374850d574156b42f0c6695067ce7b8b545154aefd8b609d0586257cf35879ac0d91246bb174b38b5130aeda7812140bd53c815345

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNq9:Dv8IRRdsxq1DjJcqfn9

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_a7fdbbf9e42ba60dd30c40f3a5dfd563

    • Size

      28KB

    • MD5

      a7fdbbf9e42ba60dd30c40f3a5dfd563

    • SHA1

      423c8544fce079d290d717e0e0d7410cd742a0c6

    • SHA256

      24977c8f7666cee481c55c9eafcd8d98f03b0f354d692fc17cb7deb618b76ec7

    • SHA512

      4ae93ccbc93f1c02a73ffa374850d574156b42f0c6695067ce7b8b545154aefd8b609d0586257cf35879ac0d91246bb174b38b5130aeda7812140bd53c815345

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNq9:Dv8IRRdsxq1DjJcqfn9

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks