Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
03/01/2025, 10:26
General
-
Target
JaffaCakes118_6bf987a77d0d2d555e47cd2eccfc18c0.exe
-
Size
28KB
-
MD5
6bf987a77d0d2d555e47cd2eccfc18c0
-
SHA1
cb7f7cbb5ed10fb250ec53bfed762ad9cde203e3
-
SHA256
c6d61f4d699d5e501079e072df60ba30d82cf1ddeb8f2abdaeee91c2432b02e0
-
SHA512
39b939755ba709577ad25c90ed9e3e91de4e92299797b30e86e5df26543584a34e96af570ba4c818337159ddad699b56ee6302f531f1006ffb2e8b7df983acfe
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNlKyJ:Dv8IRRdsxq1DjJcqfFyJ
Malware Config
Signatures
-
Detects MyDoom family 5 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6bf987a77d0d2d555e47cd2eccfc18c0.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6bf987a77d0d2d555e47cd2eccfc18c0.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5b955cf1809e9c5cd3abb6d2bbca96a5d
SHA19d174d6655d980d99568b672e49b4543cd96945b
SHA25620da6ede56fdb41e9275bf825a333ae105cdf3f1a21faba1db88265937c80fec
SHA51277a2decf15fbeb6e7e8969285e9a9c254609d4a9ed7a973b00ad9c217761721469e593f3d6fcc5cbdf1066683d7cded8bb9486bc5c9cb700f16d67341c8f324a
-
Filesize
1KB
MD5388b04f565a3e417e14969da8733616e
SHA16ec7a42f34f465f615980e52cb0ee1dfdfc03c72
SHA2562e7bab55722677fd05fdcce163550adca67c8523a697898169b054e73a1cbac0
SHA512fc25bbc6831dad2232e99f67e08e8aa152f630e39df8ff3de6fd52ec6a33f27cfd248cb5dbbf7fda4bffd10162fd0d3cfe84b1715cba462dc99e18ab0a96e09a
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB