Overview

overview

10

Static

static

5

JaffaCakes...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a91dec5840324ca0f5addff5e33cbbd4

  • Size

    28KB

  • Sample

    250410-jvb42svzev

  • MD5

    a91dec5840324ca0f5addff5e33cbbd4

  • SHA1

    1dbba50a8aaedabdb992bbc4b8def8e125ecb477

  • SHA256

    e56f416db35c4e7102dd82c3768c7c728c74b33e5f64ecfa24d0eae28c5ee3db

  • SHA512

    dfb015ee827666499f4702448dc8511dadeb3bfd16f78eb0e575c2d1fd5e140ca216273490e3276188251d87452830562b75b9350e1ab2ca4be4f95b4bf19590

  • SSDEEP

    384:1WxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN+Hx:yv8IRRdsxq1DjJcqf7x

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_a91dec5840324ca0f5addff5e33cbbd4

    • Size

      28KB

    • MD5

      a91dec5840324ca0f5addff5e33cbbd4

    • SHA1

      1dbba50a8aaedabdb992bbc4b8def8e125ecb477

    • SHA256

      e56f416db35c4e7102dd82c3768c7c728c74b33e5f64ecfa24d0eae28c5ee3db

    • SHA512

      dfb015ee827666499f4702448dc8511dadeb3bfd16f78eb0e575c2d1fd5e140ca216273490e3276188251d87452830562b75b9350e1ab2ca4be4f95b4bf19590

    • SSDEEP

      384:1WxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN+Hx:yv8IRRdsxq1DjJcqf7x

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks