mydoom | a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7 | Triage™

Login
Reports

Overview

overview

Static

static

jaffacakes...e7.exe

windows10-2004-x64

jaffacakes...e7.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7.bin
Size 40KB
Sample261002-kr3cha1ald
SHA256 a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7
MD5 ff5f9ce0a83e76c99a390bda59e0aaad
SHA1 9c27d980038ac3271d438fab4f1d3bf7b8f76c00
SHA512 7ad49bfd482fa146562276eb0b41e911a4ce42205a32bec27ac6bc9ac3c1297fe7f419cfafe0dd98500efdf1a23a3cdb56ce5ff077781dd1ceef794876f184fc
SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHmm:aqk/Zdic/qjh8w19JDHx
TLSH
T1AD137C73545095F3C58204702A85EAA2AEB9DD771749E343F6D0AA5EECB84C76B3CF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

mydoom microsoft defense_evasion discovery persistence phishing product:outlook upx worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Behavioral task

behavioral2

Sample

jaffacakes118_a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm

Malware Config

Targets

- Target
  jaffacakes118_a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7.bin
- Size 40KB
- SHA256 a591dfbf80f4ad9d2197693d68499afad6d58f8575fe59a813e4697f9d0b6fe7
- MD5 ff5f9ce0a83e76c99a390bda59e0aaad
- SHA1 9c27d980038ac3271d438fab4f1d3bf7b8f76c00
- SHA512 7ad49bfd482fa146562276eb0b41e911a4ce42205a32bec27ac6bc9ac3c1297fe7f419cfafe0dd98500efdf1a23a3cdb56ce5ff077781dd1ceef794876f184fc
- SSDEEP 768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHmm:aqk/Zdic/qjh8w19JDHx
- TLSH
  T1AD137C73545095F3C58204702A85EAA2AEB9DD771749E343F6D0AA5EECB84C76B3CF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

microsoft defense_evasion discovery mydoom persistence phishing product:outlook upx worm
- Detected microsoft outlook phishing page
  Potential Outlook account scam
  phishing microsoft product:outlook
- Detects MyDoom family
- Family: MyDoom
  MyDoom is a Worm that is written in C++.
  worm mydoom
- Executes a file named after a Windows system binary
  The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Masquerading

Match Legitimate Name or Location

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

behavioral2

microsoftdefense_evasiondiscoverymydoompersistencephishingproduct:outlookupxworm

© 2018-2026

Terms | Privacy