Overview

overview

10

Static

static

10

JaffaCakes...5d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ae20075e0578068c3670ed17ed90825d

  • Size

    28KB

  • Sample

    250411-nbmtnaxmz6

  • MD5

    ae20075e0578068c3670ed17ed90825d

  • SHA1

    ce52023bd9716a9a5eb7d6f5c60cf6343e45c17d

  • SHA256

    0f9099410314be9e95ece88034a7041c76edaf9514660e01124d8c797883ef72

  • SHA512

    ad238c15bad9924802d461b05f86659e3d4e296d8068f6092ede736a5f1b72beff363851cd4c8a0067f410420fe954a2c3f1dbebae25452dd710d0918cf0e62d

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNO+V:Dv8IRRdsxq1DjJcqfLA

Score
10/10
mydoommicrosoftdiscoverypersistencephishingproduct:outlookupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_ae20075e0578068c3670ed17ed90825d

    • Size

      28KB

    • MD5

      ae20075e0578068c3670ed17ed90825d

    • SHA1

      ce52023bd9716a9a5eb7d6f5c60cf6343e45c17d

    • SHA256

      0f9099410314be9e95ece88034a7041c76edaf9514660e01124d8c797883ef72

    • SHA512

      ad238c15bad9924802d461b05f86659e3d4e296d8068f6092ede736a5f1b72beff363851cd4c8a0067f410420fe954a2c3f1dbebae25452dd710d0918cf0e62d

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNO+V:Dv8IRRdsxq1DjJcqfLA

    Score
    10/10
    mydoommicrosoftdiscoverypersistencephishingproduct:outlookupxworm

    • Detected microsoft outlook phishing page

      phishingmicrosoftproduct:outlook

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks