Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
17/03/2025, 01:24
General
-
Target
JaffaCakes118_7c610e485e2afdfcd24a59845f7a462d.exe
-
Size
28KB
-
MD5
7c610e485e2afdfcd24a59845f7a462d
-
SHA1
b032afd83d9def2a0b4cee314232017984d59da6
-
SHA256
41e054cd710b3e4f31f55d7f540b20e9b3d3b92a54ebbd7d7ef645d5e08b0631
-
SHA512
ac3fc4af523e37dcb0dcaee1fc01da85c60320b139edc42d58117459e428e3d2eed1bcf21739e42cbef0c2a295fa6fbcedf21d81f78a7cc3a78deb7958dcea6e
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNXa:Dv8IRRdsxq1DjJcqfR
Malware Config
Signatures
-
Detects MyDoom family 6 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7c610e485e2afdfcd24a59845f7a462d.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7c610e485e2afdfcd24a59845f7a462d.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
153KB
MD53d5f16f71c80b3cd127228366fce145a
SHA1976779ec2ae4e1864a7316075c52c5176b2eba11
SHA256646ce520b3b4206a60e8be1e45c05c17c886185f5f64cb71021e146a43ff4d52
SHA512b63a7c28c019d02c5440a668ba306640aeb5415b2d5845c2868f9cc5e243742fff9faaa63ee764a123ce86cef051cac3dcad320b9bb50ca43f3c0f9febd2ddba
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
146KB
MD5f6985090f4a22fa3ec6d54bebd095a9f
SHA155ef44c2761bda1c7a9d1c293c611efe68269f28
SHA2568f7418e2d0933e1ab4638a1cc5f00384773210a04e372b109d07409337a9f88d
SHA51274f16527d9947c4667667d0b7cf2b645948a1d04fc04476f070a49149d66f7cdd98f6ab156cb145f603758f51590814b151a1f71bddf25ae7d4f309e1d18fb98
-
Filesize
28KB
MD50e7664363cf0d814bba733227154db41
SHA135f2205843838dc27fd698b42db3117fdcc24f01
SHA25659a6141051fdf34119348144ab6d5aca73479e73615b68b496af5ca954871357
SHA512d51929a3a5f2a27d52ee860f8b77396e819db9c07fdc57ce0ba2472f4439ac5eb434adf5421284c7a9eea2f120d0dba85653b2282815db76157be42dc8b82f4a
-
Filesize
1KB
MD584b48b4903336189a51987a3f9665c28
SHA1d16f594e72615f275235a11dd85074ba77748a06
SHA2561ecd8416f93bbfa25fda7f525aa2039aa3310bc54c713a6c6f23f4403efc1360
SHA5128ff2afe91dfd366d96d08da7661613df36fc03950545ef4371535603521a957ad9237c735c7b21c31319f10d8ca538dd87360559b75007680845f617f4e11f07
-
Filesize
1KB
MD59ace751c4328fe00af02bb6d339e772b
SHA15d9052afa8eeb2b877a2b59bded724eadeeb4ed9
SHA256aaa02cd9a2faa4873ad60644609caa9582cc8cc8eff70e05c0cf0dd45dc1a6c1
SHA51297202fd1296a0e2bdd5ed5a77addcc595111b6a792371f59bab58205bc3e59022328c9591233090f4df92f01e9636e85afda4c22a3b52a4e27efefa685593f5c
-
Filesize
1KB
MD5815aad575706076c8fb53df880a8495b
SHA1e9c86c2f8394ac55ee1114b0a78008107e87feb7
SHA25634dcdaf3fdde4d956856e5c0b52793e2680c2f9f5b42e48e2205e61b4a896061
SHA512a3a1e2a82e2556ba73639485f643f135b1555a0b9cf7e8f512c66630520fd551a4074a9340834ad2935e56d9672893abb88e84ea7304aabd581050bc2d51afdf
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB