mydoom | ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180 | Triage™

Login
Reports

Overview

overview

Static

static

jaffacakes...80.exe

windows10-2004-x64

jaffacakes...80.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180.bin
Size 40KB
Sample260925-vsctca1hre
SHA256 ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180
MD5 61441951e8c6e25a3ba4d555a009349e
SHA1 23c8aa88ac49c9ab0e8e47395c860d7131c648a1
SHA512 e4e066d4281bc2879103ae8d93cc8f475ee5156eb86f51bf108553b6ef8c791801882df16d3e62d3c6b28b28da1721afb615c99847a38c6b5157461c559cbda9
SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHC:aqk/Zdic/qjh8w19JDHC
TLSH
T1BE137C73545095F7C58204701A84EA62AEB9DD771749E343F6D0AA5EECB84C76B3CF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

mydoom microsoft defense_evasion discovery persistence phishing product:outlook upx worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Behavioral task

behavioral2

Sample

jaffacakes118_ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Malware Config

Targets

- Target
  jaffacakes118_ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180.bin
- Size 40KB
- SHA256 ca8819d075937598cabd417a08696a14b5317a30c1c27640f221171aa9f92180
- MD5 61441951e8c6e25a3ba4d555a009349e
- SHA1 23c8aa88ac49c9ab0e8e47395c860d7131c648a1
- SHA512 e4e066d4281bc2879103ae8d93cc8f475ee5156eb86f51bf108553b6ef8c791801882df16d3e62d3c6b28b28da1721afb615c99847a38c6b5157461c559cbda9
- SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHC:aqk/Zdic/qjh8w19JDHC
- TLSH
  T1BE137C73545095F7C58204701A84EA62AEB9DD771749E343F6D0AA5EECB84C76B3CF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm
- Detected microsoft outlook phishing page
  Potential Outlook account scam
  phishing microsoft product:outlook
- Detects MyDoom family
- Family: MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Executes a file named after a Windows system binary
  The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Masquerading

Match Legitimate Name or Location

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

behavioral2

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

© 2018-2026

Terms | Privacy