mydoom | 8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f | Triage™

Login
Reports

Overview

overview

Static

static

jaffacakes...8f.exe

windows10-2004-x64

jaffacakes...8f.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f.bin
Size 40KB
Sample261002-ghlfvasvfv
SHA256 8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f
MD5 bd8fd3b4fbd6616d7f652e6c671ffb5f
SHA1 a07ec17a8b6a931bfb998454848d09ef6a15517f
SHA512 8e1ab46641cea365f3bff26989d4b99d2558e2802b1a8e18fe391641f7c6b7d457a795991245edf23ef4465673572867629724b6fce4b98a641608567d08f082
SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHJPK:aqk/Zdic/qjh8w19JDHJPK
TLSH
T18F137C73545094F3C58245702A80E662AEB9EE771349E343F6D0AA5EECB84C76B3CF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

mydoom microsoft defense_evasion discovery persistence phishing product:outlook upx worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Behavioral task

behavioral2

Sample

jaffacakes118_8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Malware Config

Targets

- Target
  jaffacakes118_8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f.bin
- Size 40KB
- SHA256 8574d23f770cb65b93de44964214b8a45568f3af78384baff1bd09b431beda8f
- MD5 bd8fd3b4fbd6616d7f652e6c671ffb5f
- SHA1 a07ec17a8b6a931bfb998454848d09ef6a15517f
- SHA512 8e1ab46641cea365f3bff26989d4b99d2558e2802b1a8e18fe391641f7c6b7d457a795991245edf23ef4465673572867629724b6fce4b98a641608567d08f082
- SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHJPK:aqk/Zdic/qjh8w19JDHJPK
- TLSH
  T18F137C73545094F3C58245702A80E662AEB9EE771349E343F6D0AA5EECB84C76B3CF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm
- Detected microsoft outlook phishing page
  Potential Outlook account scam
  phishing microsoft product:outlook
- Detects MyDoom family
- Family: MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Executes a file named after a Windows system binary
  The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Masquerading

Match Legitimate Name or Location

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

behavioral2

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

© 2018-2026

Terms | Privacy