Overview

overview

10

Static

static

10

JaffaCakes...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ab123328ec6ee9bafa47775456d5948f

  • Size

    28KB

  • Sample

    250410-vrdz1sxqy8

  • MD5

    ab123328ec6ee9bafa47775456d5948f

  • SHA1

    b7e8503895b7193efd921940954cfa0121075473

  • SHA256

    0abaf29c1b5fcbd6f88a98eb753a961ae12f13ebf73a0938d7a3c51cd24ed7b0

  • SHA512

    40444465f9482f9a08a5ea8a945eb7d180f1bd163124b351756a729e9632312e3eb075765a38a0494f5d61d11ce5405beb72d05e2465b1b7d3822c7fa7d0159e

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNzo74g:Dv8IRRdsxq1DjJcqfr74g

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_ab123328ec6ee9bafa47775456d5948f

    • Size

      28KB

    • MD5

      ab123328ec6ee9bafa47775456d5948f

    • SHA1

      b7e8503895b7193efd921940954cfa0121075473

    • SHA256

      0abaf29c1b5fcbd6f88a98eb753a961ae12f13ebf73a0938d7a3c51cd24ed7b0

    • SHA512

      40444465f9482f9a08a5ea8a945eb7d180f1bd163124b351756a729e9632312e3eb075765a38a0494f5d61d11ce5405beb72d05e2465b1b7d3822c7fa7d0159e

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNzo74g:Dv8IRRdsxq1DjJcqfr74g

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks