Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
20/03/2025, 05:34
General
-
Target
JaffaCakes118_8184c390dfbaf355913e811a2c5e48d9.exe
-
Size
28KB
-
MD5
8184c390dfbaf355913e811a2c5e48d9
-
SHA1
a4c560438d408e4ebbfbe4aa8b49157e670b0ad0
-
SHA256
502f896569f435c6782934a0894bcc17be84882067960e81de43859fc3d13fb9
-
SHA512
0fcfb5f965bb3324761b1f78cc89284ba7b6bd1125317c97ef5261ff1cd82d7e5e661b5279dc488daab43ef92268ca03c9fb1dbdee22e386ebcb6db50c8fc92b
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNW+:Dv8IRRdsxq1DjJcqfb+
Malware Config
Signatures
-
Detects MyDoom family 9 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8184c390dfbaf355913e811a2c5e48d9.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8184c390dfbaf355913e811a2c5e48d9.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
MD59f6b312f708a2103371567f74249d2af
SHA1734e54d2cfecabee1d40b6a09b843ad68831d5d1
SHA25613e07a00ba3db0a7f8cab589fc6162715474f77b482cc07e88080596b078ec81
SHA512a7f6e796a4098ca0eac34527bf0e5c2a343779a380e677cd430809a34b69a98caeac5390a9cf008f8b47b133895f6e39488c2e23e340006187c396bb3178731b
-
Filesize
153KB
MD53296e6ada8a71c9a5e67cf180f492b86
SHA1e73b54f95e6e16eb1e53dd0484c9d739e05203fc
SHA25673c89d60384795008671772ba0e2791720a471ac5e2cda933a4f68f543bd6a03
SHA51289b6594fd4e04f0acf49171de7f400a9d14a08d9839435f7b898b108de59138bc536a5ff9148c7f20a0cc70cea889c2aa8f0e3b5478b66029a90dd578b0ff0ff
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
28KB
MD573ae91ae49297e487551a8d350d1255a
SHA11fc6bcef8a8d5d84543fbdf3b4cedc6a75eb668f
SHA256aa869d509b1bcdb983d8bd2f7d38f61baefb76a917c310e4ff23cf250b08e691
SHA5125082f70ce118b2b06319e4983f8fa8d6f08e387394ad06a1ec111078e6558d8959fc2df2345e86742dd4600ca4be2213df8319702777fae9f91133527a7788c1
-
Filesize
1KB
MD55bc484da9e2f629b54b783957033834e
SHA167d0b126a098f20625652210182ca5fbe0819099
SHA2568a73c5a9cd0b3f47de259c3f9708e74c1f78f980c496fd604dcc612df08eb82d
SHA512f761a44a1e5bcbab107e6be328b8fb2f3bb6fba2e62d72a9667a6094aaecc9935ea2828dc63361dc28655a715d4269dd2dbe73185f80b0e45449c872709c3cad
-
Filesize
1KB
MD5ff6935319fe92c80b5021a5c8e1d76f3
SHA1cb43b08e8dd70ebc76a17b93f4ede6bb15ccf41a
SHA256adf536efaefc98c45da0de165e52058ea446b121000e68e586a2532036650184
SHA5121b50d2c297de8ba78eb0932422d23cfc9d804c1b9564d4fa78d04724d1acdd84f1eac2ec61cddda16d0769053653ca168d3336a1a0ef1cf8f86abda5b2aacf53
-
Filesize
1KB
MD5af0e3810c0a7c3a88e655bf4fa432b36
SHA13c5af2c678c1d2dbd1e3f78822081ab1267a8d2d
SHA2568ba785b03cc5446e7b26e6405d1136d17f24df3aa6ba071dfce707ea3f0aa58e
SHA5123e95ca3276050534b668229d6ed22f95db6dfb448fcb13111f0be6517d4da4cfde47c1bc1524288c4efcd6309e817ad7319e88d4b3158c130b782418a587a5fb
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB