Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/12/2024, 07:08
General
-
Target
fa3033bc4fcf33c37ea7f9b3ecb945cf9105ebc6349f11c1b01c200009a20a17.exe
-
Size
29KB
-
MD5
c5070c258aa466d37dc3e19b24890f30
-
SHA1
f74612565d5f46f51cf201593b5ffe62c53ee183
-
SHA256
fa3033bc4fcf33c37ea7f9b3ecb945cf9105ebc6349f11c1b01c200009a20a17
-
SHA512
5654cb095248ab79ce0ce3118a2516acdf1c01174072342c52f8778b33b6aeeee7299910f43374658779a64ce661f29ee95cd1db7e355d688250da66a7009585
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/4h3:AEwVs+0jNDY1qi/qQV
Malware Config
Signatures
-
Detects MyDoom family 6 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa3033bc4fcf33c37ea7f9b3ecb945cf9105ebc6349f11c1b01c200009a20a17.exe"C:\Users\Admin\AppData\Local\Temp\fa3033bc4fcf33c37ea7f9b3ecb945cf9105ebc6349f11c1b01c200009a20a17.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
310B
MD52a8026547dafd0504845f41881ed3ab4
SHA1bedb776ce5eb9d61e602562a926d0fe182d499db
SHA256231fe7c979332b82ceccc3b3c0c2446bc2c3cab5c46fb7687c4bb579a8bba7ce
SHA5121f6fa43fc0cf5cbdb22649a156f36914b2479a93d220bf0e23a32c086da46dd37e8f3a789e7a405abef0782e7b3151087d253c63c6cefcad10fd47c699fbcf97
-
Filesize
29KB
MD515b530c7537a646ec073677ce52f25ac
SHA1a67de09fdd7f7c43e63b9ff521ac3a5a2af96c22
SHA2568fd3898fce7b162da66e2b8c3785e02a3791c91797cdbf5dce8bff952c766879
SHA51221d242556e79689abdb4475e595bc1226e769868b2c46d181a858a59753b50a8d6566cf62ad668348a3cf03449ff6f52bd1ae31a1943c8e3990699cd42ad2ace
-
Filesize
29KB
MD5cfc96b9e082e4ceaf3a9204d2e8f0740
SHA1c2538d3ba7b485e90b855ca90f5783c11b8c4f3f
SHA25621bb42f7d70673b424e154261db66efd877e0d570ea7ceda73cc2680a27fb27b
SHA5123cbfed0549cd0f4ef07364b67d16ca2833fb2d878a9952e91ba973090ca73b505b45b49622e7ab4bba2aba281d30561ebd18dab4fc2d908c716b999b4f472377
-
Filesize
320B
MD576d76945a055d94507f6f8f10f8ae326
SHA131e703d2ac03e0dfd39fc77f3200e0730c1600ba
SHA256a54fc56882a7a940c362a007b2ee1c33b7c811f1652526a88b15ddff69478abf
SHA5129907d35a1455033af6be84b32898563d93a1ff806ac332ba21d71a93611a91d461ecaaedc40b570382f2b05de7a3101d1ee60330e7031e663e038e258e1c2404
-
Filesize
320B
MD5076361bd8f8065aabf251c0ebb8a3a85
SHA1b3ea219d865a2074b9579c98af984e8418a46b2d
SHA2560de5a187b982afb1a68c76ad8d17e65930a2e4114bbea5deeed4c24e77b005f9
SHA512e537ad171b5da11571f60921e1816bbf6b55e0d5bd0337e4e0b5c64b40065d5174fb1582bace6110e452e8facf126e7384c44d157bef090ff83f08db52358e69
-
Filesize
320B
MD5c0e14721f7991a402ec405687b83bc62
SHA112c20461d7f09514835a977a6bd1691be405ccc8
SHA2560fd66da13d5254831f392c4db8e31fedf17350ba941b8d65778f68a78655a88a
SHA512da6dd5051eb4aa225b76fef48e073fc98e5b1bf81e4537ed6b9c4312128af49d22c272e2202b09b26dc776160216da2b37e08c277cab58d6633ad74c55b7cf7a
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB