Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0563c4095d...18.exe

windows7-x64

10

0563c4095d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0563c4095de0d7f3f8eba8a104644c7c_JaffaCakes118

  • Size

    68KB

  • Sample

    241001-l5g46atekk

  • MD5

    0563c4095de0d7f3f8eba8a104644c7c

  • SHA1

    378c150c9418ede515a97fb68c1eedfaf5fae3d6

  • SHA256

    06e444feee4554c158960e78518550b4839f38ed226369c0d708463a6a40ee6d

  • SHA512

    3db51f66df3c1e9c6f8f0c66445339f9959ffd8908216a78db5f4f33be8dc23fb9528ca34503c68f8e93208fe9474e6e79a631b99eb8ef29cc6952d3296f8d04

  • SSDEEP

    768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4cU98iILKF5w3OZAItUukC:n87wc1aGNC0klI7CPpIFa6oiILKrtpp

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      0563c4095de0d7f3f8eba8a104644c7c_JaffaCakes118

    • Size

      68KB

    • MD5

      0563c4095de0d7f3f8eba8a104644c7c

    • SHA1

      378c150c9418ede515a97fb68c1eedfaf5fae3d6

    • SHA256

      06e444feee4554c158960e78518550b4839f38ed226369c0d708463a6a40ee6d

    • SHA512

      3db51f66df3c1e9c6f8f0c66445339f9959ffd8908216a78db5f4f33be8dc23fb9528ca34503c68f8e93208fe9474e6e79a631b99eb8ef29cc6952d3296f8d04

    • SSDEEP

      768:nqQ07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4cU98iILKF5w3OZAItUukC:n87wc1aGNC0klI7CPpIFa6oiILKrtpp

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks