Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
14/03/2025, 14:34
General
-
Target
ff3caaf8fedc2a66a84495f0b66193b10f55c7b33f19b3c4913f6beefd4062d0.exe
-
Size
29KB
-
MD5
65f9bc6d305eeb8120fe975b912e77d9
-
SHA1
eb9393c07a1354b67cdf3cf8adc1a61144687c39
-
SHA256
ff3caaf8fedc2a66a84495f0b66193b10f55c7b33f19b3c4913f6beefd4062d0
-
SHA512
3b1dabf81089affd59837d1486b38db479460eb06da69f0e7e9940f8a8d2e6df41b0c9b53dc5bfc2e514148092a4e1bf25afb27cacded08c27562e6351520fab
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/r:AEwVs+0jNDY1qi/qT
Malware Config
Signatures
-
Detects MyDoom family 7 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff3caaf8fedc2a66a84495f0b66193b10f55c7b33f19b3c4913f6beefd4062d0.exe"C:\Users\Admin\AppData\Local\Temp\ff3caaf8fedc2a66a84495f0b66193b10f55c7b33f19b3c4913f6beefd4062d0.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
311B
MD5cb42662caffe525e9957c942617edf06
SHA1615009db9a1a242579e639ee0fc7a2a765095bfe
SHA256312bf5c9a1a122abc6361bf8ed01a44346285b962c0d273ef2de0eb796ae1b15
SHA5123e6777f1f74f64fff6cb2bd1a81a6c08d9a64feeebc3deb7cacb8f0f41b23a5c59a8e6294b99c76dd386aaaf9043a1a252ac47910fe1801bdc2995f7b675692c
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
288B
MD5943d3a166464afaab15deb95e89f0e6d
SHA193f1bd8b49e536803a7a435fc3addc6d3fa1dae9
SHA256750b6bde795e775cb5406bddfca19492e2ff5b484ee7040b60012ed85b987a92
SHA512744f568303f2c582543d87177b720684914df667d1d9b7535048920c7d2e987253c31d890172fe404726b2b2e6c9dae17dc961188711538dafaf8cda4c36aa68
-
Filesize
29KB
MD5afff79aed089efcdeea65995ce819f5e
SHA1df07978a68aa02ee248a5f370940058dd7db207c
SHA2564dc1804596d6cb464a5eded51202b1a84c64020045f47730a0f5d41a549bca18
SHA51280a763d44e8134236d1b854fd977365b82e57df136dd57508f6a98f4be2661f77090ba77280c42651d9df62583cd81702f3ba7648f2f4c204e033221c7d3c800
-
Filesize
320B
MD5a38197f7f236948ea591ff966476d4f9
SHA12c724f5f2f78a95fb337ec277f6b0143ac20a086
SHA256a7ec71030b32742028c21bf6aac3aadde327e1cb7bf01b4e2d374734a5786e5e
SHA512d3d128ae86b1259c93d443c787f5e789b94a564c4ba13d61705444f1f0377720b4fcb10e2a6e565894fa78b2ed3f56975812abed697e1002e2b0c31cf7bb284b
-
Filesize
320B
MD51b6b109b47f416aff2850458f60fae47
SHA193777d38d940c3ae519657a1a0f52abd5d4ef863
SHA256841c4be4dcf6225cfa569026716ac3cd056ac823eb11be31ad54c5158c9d4c00
SHA512572740f4bf873b6535efd8c61d3f54367a0dc98ad51f9f8093ecdc51bc83bf3a8d07c451ddfd159d57db94b86a175a5f191724c9f8fc81c5a56d48dd23ae6bdc
-
Filesize
320B
MD566d604b67d39a27d481a55f664fadbdc
SHA1f00c4b03ce6b8d7acad60db2b15b74f9aa545bb6
SHA256a4ae3e8b728c7fac91c3d34398074f056782231c8b99a4e7aecb01c7c767dbc4
SHA51248993d2de7f7b531dff279b6b9aa87f6318453bd0c2d45fc25a2837facdc7def3771defd6f83a354fd07219fbf9fe86c6dfa2e46e34b5c22159186dbf6d74103
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB