Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06/12/2024, 07:59
General
-
Target
ea9a5bedfe83f7c1953c3f902050794a835dc1ea7ffb2f274a2af05f2645e9f8.exe
-
Size
29KB
-
MD5
8d094de10a4c3f4d6e443ba185fb645b
-
SHA1
8e64f4c74c109bde4909c58e4d6fee40913b055b
-
SHA256
ea9a5bedfe83f7c1953c3f902050794a835dc1ea7ffb2f274a2af05f2645e9f8
-
SHA512
18218d3ad0098f40b62dce8e403fa3e96b639cc8597c0065288e67ce6ba47fe20c498746ed6e7aa021fe0de8112c4e9bb8e28f709373e32f4399a7fbe74459c8
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/d:AEwVs+0jNDY1qi/q1
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea9a5bedfe83f7c1953c3f902050794a835dc1ea7ffb2f274a2af05f2645e9f8.exe"C:\Users\Admin\AppData\Local\Temp\ea9a5bedfe83f7c1953c3f902050794a835dc1ea7ffb2f274a2af05f2645e9f8.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
315B
MD514b82aec966e8e370a28053db081f4e9
SHA1a0f30ebbdb4c69947d3bd41fa63ec4929dddd649
SHA256202eada95ef503b303a05caf5a666f538236c7e697f5301fd178d994fa6e24cf
SHA512ec04f1d86137dc4d75a47ba47bb2f2c912115372fa000cf986d13a04121aae9974011aa716c7da3893114e0d5d0e2fb680a6c2fd40a1f93f0e0bfd6fd625dfa7
-
Filesize
305B
MD5157431349a057954f4227efc1383ecad
SHA169ccc939e6b36aa1fabb96ad999540a5ab118c48
SHA2568553409a8a3813197c474a95d9ae35630e2a67f8e6f9f33b3f39ef4c78a8bfac
SHA5126405adcfa81b53980f448c489c1d13506d874d839925bffe5826479105cbf5ba194a7bdb93095585441c79c58de42f1dab1138b3d561011dc60f4b66d11e9284
-
Filesize
320B
MD57e1e124145420f70e06074f3b7c610a6
SHA1451bb7d10b12a9e92017537f4dd008412bc65efb
SHA2560ca63ec6f8326443424f8dd3fe4bb1bc97406a3bad3eeff20ecbae8f902a2887
SHA512ec95b6b4ed4c96ea3be93aff01be1549f64dc8bdfc3b5212a66c1e987eb1a0c154c01c9a16f54997f857f920473d99ee090c81611d3f5658f52383632f3e4ca8
-
Filesize
29KB
MD5e7cd57c9205162aee6ec1efa6e65cb45
SHA145f40d2e0f56d8a1ae916f777dda6565eafebdc3
SHA2565736a2ef9518988376ad2d2a23c5c6dccbdd099a203640ca2a82b7a752d9d038
SHA512ffefcf2578ffd92656ecb19cf92efa956a7fbea168eec99e9ef1772d60cfc1669e3456b022ba5f3c656118431efff1d9665ff848ad7d16bed3b401dcda40cdc3
-
Filesize
352B
MD5b063a5a614d2ccb4fafe183d6eac54ef
SHA10146e4467f7bf98b55cb8ebf3966b14e27bcd46c
SHA256075d7b35bc44acba8975864d1e1b59d2f878bc92fcd8c5a3e5fac9908b090f9f
SHA512230a9ef2682e78ec27b9b225887aa0b95a3084b2942586b99a8c59925d3a486e290745c776bf0fe32f87b5b1ee1c6e5f77807a7ae993ee74386d71cf70f711a9
-
Filesize
352B
MD5322322c14fbb8c096108020ffc32e1ea
SHA172a88a72e898e7ab09049b768cbf1cea1e4b38f7
SHA256476670fceeb96f179ef5d7c3f8459a8b3361269adbd836d2ce440ea23bcd8558
SHA512267a824c00400e153ec05e5a41e065eca2a2f2359fde3cc09f1f67dfa76797a0873f55c1fa039366df1705b9c25a90628091866e723f24882c120ebce9b168ac
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB