Overview

overview

10

Static

static

10

JaffaCakes...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b2aea59039cb33431adefbb6701cd0da

  • Size

    28KB

  • Sample

    250412-sx67msxmy8

  • MD5

    b2aea59039cb33431adefbb6701cd0da

  • SHA1

    31400e3402bf3ff12984e2f739a49572e922125b

  • SHA256

    cc2151999bea3cfbf472adaca9fdabb5fff01d487f6fb720f72062668be56fa7

  • SHA512

    1696aacb3f749221209a9bbbbca4da6fa884d6955a95307e65d668ebda9f0bca531bcb69d09f1051d772e928388a2cd907f934854b5b3b90a402c4a278cf3487

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNsO/G:Dv8IRRdsxq1DjJcqf0e

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b2aea59039cb33431adefbb6701cd0da

    • Size

      28KB

    • MD5

      b2aea59039cb33431adefbb6701cd0da

    • SHA1

      31400e3402bf3ff12984e2f739a49572e922125b

    • SHA256

      cc2151999bea3cfbf472adaca9fdabb5fff01d487f6fb720f72062668be56fa7

    • SHA512

      1696aacb3f749221209a9bbbbca4da6fa884d6955a95307e65d668ebda9f0bca531bcb69d09f1051d772e928388a2cd907f934854b5b3b90a402c4a278cf3487

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNsO/G:Dv8IRRdsxq1DjJcqf0e

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks