Overview

overview

10

Static

static

10

JaffaCakes...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b614061c7d1ef48a1465d73424129b18

  • Size

    28KB

  • Sample

    250413-3ytytavny6

  • MD5

    b614061c7d1ef48a1465d73424129b18

  • SHA1

    6e82fc9560d67a45416a2a604977559350fa4788

  • SHA256

    5b2eb9e6f526d28e15c50fa10ecbf95143f81689c3a7ac4999b48b79c33f5d0e

  • SHA512

    0dc4795247862a819975d80ac4f164dd99c1bec5727dd5d67960702dd7a34ced0ca17e4e9184f39739f981a14fb0982a727bbf78049570d49ddb74b22bc44f27

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZNUSvU:Dv8IRRdsxq1DjJcqfrd

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b614061c7d1ef48a1465d73424129b18

    • Size

      28KB

    • MD5

      b614061c7d1ef48a1465d73424129b18

    • SHA1

      6e82fc9560d67a45416a2a604977559350fa4788

    • SHA256

      5b2eb9e6f526d28e15c50fa10ecbf95143f81689c3a7ac4999b48b79c33f5d0e

    • SHA512

      0dc4795247862a819975d80ac4f164dd99c1bec5727dd5d67960702dd7a34ced0ca17e4e9184f39739f981a14fb0982a727bbf78049570d49ddb74b22bc44f27

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNZNUSvU:Dv8IRRdsxq1DjJcqfrd

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks