Overview

overview

10

Static

static

10

JaffaCakes...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b508e684e4f199a938c2f378aee2137a

  • Size

    28KB

  • Sample

    250413-sxlkyaywhz

  • MD5

    b508e684e4f199a938c2f378aee2137a

  • SHA1

    168b2b3f1f12bc5a45c83d7d149f363b4e294cac

  • SHA256

    dccb9dc4a4485aa80ec1687b7e2a2d9ebb291cbfc1ec981a53f679bc89f9e7ad

  • SHA512

    d3f36ff320d5aa1eca3f3fa3753a13cf8876f4735e31510febbed80c85244476054a14bac9ddff5c06c0b36311ca8ccda52e3b538f2d75c49b430a275163f747

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN3c7qt:Dv8IRRdsxq1DjJcqfUBt

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b508e684e4f199a938c2f378aee2137a

    • Size

      28KB

    • MD5

      b508e684e4f199a938c2f378aee2137a

    • SHA1

      168b2b3f1f12bc5a45c83d7d149f363b4e294cac

    • SHA256

      dccb9dc4a4485aa80ec1687b7e2a2d9ebb291cbfc1ec981a53f679bc89f9e7ad

    • SHA512

      d3f36ff320d5aa1eca3f3fa3753a13cf8876f4735e31510febbed80c85244476054a14bac9ddff5c06c0b36311ca8ccda52e3b538f2d75c49b430a275163f747

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN3c7qt:Dv8IRRdsxq1DjJcqfUBt

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks