Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
16/03/2025, 05:10
General
-
Target
JaffaCakes118_78fbf49448456b9f575a8cbf662eb973.exe
-
Size
28KB
-
MD5
78fbf49448456b9f575a8cbf662eb973
-
SHA1
ac653037c15c63be796597468693bb9aef51256b
-
SHA256
4fab4cdb6a98bc0c5a4f06890876585a4b56a950151a668cd86a4834d5c0a0a2
-
SHA512
08c20e3531741b2cbca0d44bec79a82730e5757764f31179754fc561fb0b47ea8e5771b393d8c00f4b583b2e77cb523883b28f495ddb9e2fd0c2d6590ca228e5
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN8u:Dv8IRRdsxq1DjJcqfy
Malware Config
Signatures
-
Detected microsoft outlook phishing page 1 IoCs
-
Detects MyDoom family 10 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 29 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_78fbf49448456b9f575a8cbf662eb973.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_78fbf49448456b9f575a8cbf662eb973.exe"1⤵
- Detected microsoft outlook phishing page
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
312B
MD55431b34b55fc2e8dfe8e2e977e26e6b5
SHA187cf8feeb854e523871271b6f5634576de3e7c40
SHA2563d7c76daab98368a0dd25cd184db039cdd5d1bc9bd6e9bb91b289119047f5432
SHA5126f309dd924ba012486bcf0e3bafe64899007893ea9863b6f4e5428384ad23d9942c74d17c42a5cf9922a0e0fd8d61c287a2288a945a775586125d53376b9325c
-
Filesize
116KB
MD54bb02f11b674e248ed7e36509b07975f
SHA1dd54019de333f400e24b59ef52a040939df4c9c4
SHA25613f38a50df9b14658b3d2034ffdecab15eb7d263ff197b4b34e66f156ff92fce
SHA5124fdb01a86cc91591ba6b7a40516872e21c0f8e4c62c6e63449334846d466e91dafe9329c86b2eee25c123a1a3ecbe7e8662dd4a1fc9e52dff193704da9f373f8
-
Filesize
28KB
MD52a6cb9c3cf7a76647a087bc512649bbc
SHA137a9404e2e8a73d2cefea7f4a3f0531d03d497c7
SHA256d5561dd8d6d3f468a2bcf0c51b3d4a0b9db710cdf87767cc74d87324c33d746a
SHA512afcec05ee2c27c4173a1c01bd1315cfdd6a843e51b4f5bb8cdc6f6063d2acf3fb994960e5fec7e4b5a78dcf0ec61fda58ff69212e6b2df19bd9ed896e877128b
-
Filesize
1KB
MD5ae60b791e9c1a99509473ae678b6a9d8
SHA11a02f12d71127112200826018541c21332fb75c3
SHA25677089d5c5a5d7853a259adaf02b5294e2640edec7888f38086259809d000c9a1
SHA51298ae8c89e93441fb544d30dd9bb6341ee2f70e67e508872dc784c0a1dac010a01689db80af8563ccab33302b6d6517aa47d3ce44b1ded5f0085b9330f27ccd58
-
Filesize
1KB
MD50b50587be2ecef8cbc8b17f2f0b7a61a
SHA1b6713d02e995498a6d6f0204b90cbb7ff67ab6a5
SHA256dc2f1d1838b1983bf2d662d0ab42d803bfff300e6130a0b2f0d6e306423138f1
SHA512cd05867f37c055d0e733b1e1a7f83e888927218c2860fd9b6816ce85f0afadbbdd5d7e5e2e2a387fc8437e5f1b0d74c7a241f33ff5a727b0695fd6da05a1db8a
-
Filesize
1KB
MD531097542be21fccc70f25cae59df43f7
SHA1867a9c5ebc1d0cbccc605f0c5e01523241338c46
SHA2565152f0f9ad28b9a76cb09fcfb240f5f229b2f546eb912621e05dac1d928fbd6e
SHA51272bbfd9177ba3c9bb8e85c2d248ba33a6894bde1a6fdb8cd410d9f9f3d89e097a9778a640c3fdf7f781014a8edde079174285adb5b079eabe39149a665f0f0fc
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB