Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...a9.exe

windows7-x64

10

JaffaCakes...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_84f4f2990cedf0d6ded320a25b5620a9

  • Size

    28KB

  • Sample

    250321-2azzgswkt4

  • MD5

    84f4f2990cedf0d6ded320a25b5620a9

  • SHA1

    c18c5e0bcd833807595eb3a963ec396bc5d1e94f

  • SHA256

    20c1285998103c38c171ee89e7da9470598f82d640dce65ae1e201df899fc5dd

  • SHA512

    b6c6b43186d6d1c37b6d8c6b2796d9b665602a410d5c3410b68b9dcc66b97afa6eaf4dd64eff35ddb0bb2d38d70bf563a3482e0a8b687aaf5103a2c21bd57757

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN5vX:Dv8IRRdsxq1DjJcqfs/

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_84f4f2990cedf0d6ded320a25b5620a9

    • Size

      28KB

    • MD5

      84f4f2990cedf0d6ded320a25b5620a9

    • SHA1

      c18c5e0bcd833807595eb3a963ec396bc5d1e94f

    • SHA256

      20c1285998103c38c171ee89e7da9470598f82d640dce65ae1e201df899fc5dd

    • SHA512

      b6c6b43186d6d1c37b6d8c6b2796d9b665602a410d5c3410b68b9dcc66b97afa6eaf4dd64eff35ddb0bb2d38d70bf563a3482e0a8b687aaf5103a2c21bd57757

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN5vX:Dv8IRRdsxq1DjJcqfs/

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks