Overview

overview

10

Static

static

10

JaffaCakes...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aa8acc41ec863cad647d4b6ab6de7375

  • Size

    28KB

  • Sample

    250410-rz7eravjv7

  • MD5

    aa8acc41ec863cad647d4b6ab6de7375

  • SHA1

    a4d2ef1c430fbafa9f20d0af3da1544edf391975

  • SHA256

    9f921b00dc9ba7a359c46224115dbb3a36b4ab11b50ee5803d52da9e33a54835

  • SHA512

    0b696b95af94f3aa68a26574564d9a854eef2748c86cb1f5488bf89403d4f5c63ca9204629cf873b51da3b16c045bca18d8f7154a1763c49de138883687827bd

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNos6QU:Dv8IRRdsxq1DjJcqff

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_aa8acc41ec863cad647d4b6ab6de7375

    • Size

      28KB

    • MD5

      aa8acc41ec863cad647d4b6ab6de7375

    • SHA1

      a4d2ef1c430fbafa9f20d0af3da1544edf391975

    • SHA256

      9f921b00dc9ba7a359c46224115dbb3a36b4ab11b50ee5803d52da9e33a54835

    • SHA512

      0b696b95af94f3aa68a26574564d9a854eef2748c86cb1f5488bf89403d4f5c63ca9204629cf873b51da3b16c045bca18d8f7154a1763c49de138883687827bd

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNos6QU:Dv8IRRdsxq1DjJcqff

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks