mydoom | 963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79 | Triage™

Login
Reports

Overview

overview

Static

static

jaffacakes...79.exe

windows10-2004-x64

jaffacakes...79.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79.bin
Size 40KB
Sample261002-ghdq1asves
SHA256 963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79
MD5 6b31bb7afb0a756270fd338abcf7e33e
SHA1 bfd3df4f286f0abd0449a30acbc6687e12b7053b
SHA512 3fa0a637170a31151ca6e5257df57f7e74e8f4f26629a8cd8adeea84ecfd4f0441263e785e2a3a4a808e742d93aa7753c919eb2756b066de7e5882f074e517a8
SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHht:aqk/Zdic/qjh8w19JDHf
TLSH
T1C5137B73544095F3C58244701A81EA62AEB9AE771749D383F6D0AB5EECB84C76A3CF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

mydoom microsoft defense_evasion discovery persistence phishing product:outlook upx worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Behavioral task

behavioral2

Sample

jaffacakes118_963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Malware Config

Targets

- Target
  jaffacakes118_963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79.bin
- Size 40KB
- SHA256 963f3caa319cbc066d637b671e8433b7c6989d1752d2cbe6d9da407fdaad8f79
- MD5 6b31bb7afb0a756270fd338abcf7e33e
- SHA1 bfd3df4f286f0abd0449a30acbc6687e12b7053b
- SHA512 3fa0a637170a31151ca6e5257df57f7e74e8f4f26629a8cd8adeea84ecfd4f0441263e785e2a3a4a808e742d93aa7753c919eb2756b066de7e5882f074e517a8
- SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHht:aqk/Zdic/qjh8w19JDHf
- TLSH
  T1C5137B73544095F3C58244701A81EA62AEB9AE771749D383F6D0AB5EECB84C76A3CF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm
- Detected microsoft outlook phishing page
  Potential Outlook account scam
  phishing microsoft product:outlook
- Detects MyDoom family
- Family: MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Executes a file named after a Windows system binary
  The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Masquerading

Match Legitimate Name or Location

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

behavioral2

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

© 2018-2026

Terms | Privacy