Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/10/2024, 10:05
General
-
Target
558b28d0cb44ab724fa43d42bc93d80e42ec113b1e29dddf587f567a29a243e4N.exe
-
Size
29KB
-
MD5
99decc1150da4152946b22e60c1153d0
-
SHA1
a76ffb9e4fbacccd2e4a995d38bbc9393290555f
-
SHA256
558b28d0cb44ab724fa43d42bc93d80e42ec113b1e29dddf587f567a29a243e4
-
SHA512
82fc88c19499b8f73addadb267fb60ec401e448b6abd0156a2c1181e614cce6c6e66dc90f0ede865067f4867bbe08b3b70b77f9fbc1b4d332f7a140031767651
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/e/:AEwVs+0jNDY1qi/q+
Malware Config
Signatures
-
Detects MyDoom family 5 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 21 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\558b28d0cb44ab724fa43d42bc93d80e42ec113b1e29dddf587f567a29a243e4N.exe"C:\Users\Admin\AppData\Local\Temp\558b28d0cb44ab724fa43d42bc93d80e42ec113b1e29dddf587f567a29a243e4N.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
256B
MD5a4f30778a3138affd845bfb09790a3a6
SHA1fb85d1aea144dde70ea01d9d95262eabc97fd149
SHA256303629e57e0bef72480eeb1f8cc6c552c874dbdf214747d51d7784396fea24de
SHA512e1eb5f660dbfbb4b98e0e0d5bea4304f6b0fbb87300f2d3b0d10e4e3dee2caae477759b73943d51aa793bb0d5ad0a9d2bd6fbf4e9e4e514f86b9779d863f835b
-
Filesize
29KB
MD5185cc75d804cb1518340108a132653c1
SHA1d38716c47f59cbd33903971d70cbb7473787eb40
SHA256d829b7e09a8d69966df53065dc5499ec0e409bd306c27f36ee1beb3c8d98e887
SHA512a7301ea9da6779daffe3d5f67097c8e50c68bc3f38b3614ed81026a222c8b5488b4b23281f30a9e826d0081874e5ecc5f341bfed80184f30d7ec3e56e7c1a6ed
-
Filesize
288B
MD5d9643abbfef1b11f52aa979c281c7468
SHA18cb8dc4621e9149553b87322ffce7d95c7cae30b
SHA256b7b081d2e3f66e8b696fecb3f5390b3f39f1345fb5fd3884a2377e1b4ca9185d
SHA512f78365bccbf9ed128c1621756d2f6e1a2cd5fc2f970c9c1c475694770e84e18125d06e113945e25693b48eb3bb0d05e5090fced9fb55d0d8bbe9c4e5ea42e949
-
Filesize
288B
MD551a400bf1b055d14d3a5487477862a1e
SHA1b1fd34bbbab8580cfa2edfb870f544e6a1d4e5d3
SHA256e03b2ba4eac4fd4b8ad82a7bc91e730189a721f606b4258f54ae5a31d5594bb2
SHA512fc021fe62e14b1c287a4d55732deed1beeb19c8650118f102a423ab6273f6c9734d48d3a4de69175316ce319186da03a58bc217b4362bc1b17ece1c602fff8cb
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB