Overview

overview

10

Static

static

10

JaffaCakes...9b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b1c5daa892a1f7481ded8e3d838c5f9b

  • Size

    28KB

  • Sample

    250412-k48eaa1ydy

  • MD5

    b1c5daa892a1f7481ded8e3d838c5f9b

  • SHA1

    68a749858b95ec53b663abd630a2edcf5b1d0e6c

  • SHA256

    26c441ad7573bcb974784f3c1a9b31892dab7a4324fa85196175a56eb017a7ba

  • SHA512

    15eeba9cd2f2df3bb3f9713446ef3cbd6e22e0523f8211550442aa9c51fd1f66940e2b92643481252f4b147815e2073599eaf502d972ce4446d530d479185c6e

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNnop:Dv8IRRdsxq1DjJcqfks

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b1c5daa892a1f7481ded8e3d838c5f9b

    • Size

      28KB

    • MD5

      b1c5daa892a1f7481ded8e3d838c5f9b

    • SHA1

      68a749858b95ec53b663abd630a2edcf5b1d0e6c

    • SHA256

      26c441ad7573bcb974784f3c1a9b31892dab7a4324fa85196175a56eb017a7ba

    • SHA512

      15eeba9cd2f2df3bb3f9713446ef3cbd6e22e0523f8211550442aa9c51fd1f66940e2b92643481252f4b147815e2073599eaf502d972ce4446d530d479185c6e

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNnop:Dv8IRRdsxq1DjJcqfks

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks