Overview

overview

10

Static

static

10

JaffaCakes...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aa7f93ca0367b07b3bdccfd36397c9c9

  • Size

    20KB

  • Sample

    250410-rqn7tatxay

  • MD5

    aa7f93ca0367b07b3bdccfd36397c9c9

  • SHA1

    a91429cf218c319b20762632834135a8a5399421

  • SHA256

    b4a62fd2f5774a517dc26728a127c5f39047e446875479318144f39565e97bbb

  • SHA512

    cb8ac8c6271baed5f7fc15be4a92095904ce7fce3311525a63ee1f5c20f1508941c6f97c73628f45421253e19cf9ee9492f66cf388e01c175071fe2c09fc7845

  • SSDEEP

    384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUd:SCIqdH/k1ZVcT194jp4d

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_aa7f93ca0367b07b3bdccfd36397c9c9

    • Size

      20KB

    • MD5

      aa7f93ca0367b07b3bdccfd36397c9c9

    • SHA1

      a91429cf218c319b20762632834135a8a5399421

    • SHA256

      b4a62fd2f5774a517dc26728a127c5f39047e446875479318144f39565e97bbb

    • SHA512

      cb8ac8c6271baed5f7fc15be4a92095904ce7fce3311525a63ee1f5c20f1508941c6f97c73628f45421253e19cf9ee9492f66cf388e01c175071fe2c09fc7845

    • SSDEEP

      384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUd:SCIqdH/k1ZVcT194jp4d

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks