Overview

overview

10

Static

static

10

JaffaCakes...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a8cfc304b1af8b9fddbffcc76111070d

  • Size

    28KB

  • Sample

    250410-halmbatsb1

  • MD5

    a8cfc304b1af8b9fddbffcc76111070d

  • SHA1

    d35819cb46a2aaccc5344dd9a532734a93b16d05

  • SHA256

    82f92d7bd31d4f8453219be8300df91008a777ce961429e1c7e420217bd7c820

  • SHA512

    1fa0ea35dfd52d31d7c7de778b22f2d345b6812a84f6a2466a5e8da74829c2a29e416fbe1504b25f721b05721103bf77dbef35fb3295ec2bcab8300a772a1fb9

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNhA2NoU:Dv8IRRdsxq1DjJcqfLsv

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_a8cfc304b1af8b9fddbffcc76111070d

    • Size

      28KB

    • MD5

      a8cfc304b1af8b9fddbffcc76111070d

    • SHA1

      d35819cb46a2aaccc5344dd9a532734a93b16d05

    • SHA256

      82f92d7bd31d4f8453219be8300df91008a777ce961429e1c7e420217bd7c820

    • SHA512

      1fa0ea35dfd52d31d7c7de778b22f2d345b6812a84f6a2466a5e8da74829c2a29e416fbe1504b25f721b05721103bf77dbef35fb3295ec2bcab8300a772a1fb9

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNhA2NoU:Dv8IRRdsxq1DjJcqfLsv

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks