Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01a55566a18edf4e283f42c9178a8f87_JaffaCakes118

  • Size

    34KB

  • Sample

    240930-q3aphssend

  • MD5

    01a55566a18edf4e283f42c9178a8f87

  • SHA1

    70c472876303d95fbe0f5d22decec533a5d86c6f

  • SHA256

    800c10b34ba0a757f8a8a31fe6a8f7da27236b861f36ba594db3f428a79e0f55

  • SHA512

    22e898ad9838826ad5bd12e0bdadd9c7cc2217670e76e7af24c4536ec1f6f661888f72a6578992b693e9a6f8c802274e05051c30173650333e80214c664519cf

  • SSDEEP

    768:VCIqdH/k1ZVcT194jp4AIsjQWGiShHyZWIF:VNqaLV8a6xWehHyZPF

Malware Config

Targets

    • Target

      readme.scr

    • Size

      34KB

    • MD5

      4875da2286440c2bceef93be183a276a

    • SHA1

      ed700a2af605cecaa208a4c0b88aa229c3c96616

    • SHA256

      70aa54b1bd3a04ba81faf4681148336fb91ca4ee904f2556087edd6128f67a50

    • SHA512

      3c4190e9b8421dc7efe6d94a4c0af39ab8caac6bc658f674d36607cf38553b94ed7411d4581055b71c1d7be084e3dc43507a589c76690b01122a28958c24c4a7

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4AIsjQWGiShHyZWIk:SNqaLV8a6xWehHyZPk

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks