Overview

overview

10

Static

static

10

JaffaCakes...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aaf890021975ba40a5af1496c5a366eb

  • Size

    28KB

  • Sample

    250410-t7x76axkv2

  • MD5

    aaf890021975ba40a5af1496c5a366eb

  • SHA1

    a08befb73ab1ee41804b1d002c19f274b2f01b99

  • SHA256

    2d29ce10c0d4b0a84ed6fd40eb5d5dbaaa6f7343ebf4da4104faf39a7a4eb862

  • SHA512

    58eadf9fd7d91efb2306e39db94b07591a0a6c1797fc81e6dcefae657972742dd82239f5f0b10dd45bffca804658f7f2c5b761bf4885721db87b673ece17c1cb

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNK+QST3pNB:Dv8IRRdsxq1DjJcqfp+B5L

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_aaf890021975ba40a5af1496c5a366eb

    • Size

      28KB

    • MD5

      aaf890021975ba40a5af1496c5a366eb

    • SHA1

      a08befb73ab1ee41804b1d002c19f274b2f01b99

    • SHA256

      2d29ce10c0d4b0a84ed6fd40eb5d5dbaaa6f7343ebf4da4104faf39a7a4eb862

    • SHA512

      58eadf9fd7d91efb2306e39db94b07591a0a6c1797fc81e6dcefae657972742dd82239f5f0b10dd45bffca804658f7f2c5b761bf4885721db87b673ece17c1cb

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNK+QST3pNB:Dv8IRRdsxq1DjJcqfp+B5L

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks