Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
21/03/2025, 22:23
General
-
Target
JaffaCakes118_84f4f2990cedf0d6ded320a25b5620a9.exe
-
Size
28KB
-
MD5
84f4f2990cedf0d6ded320a25b5620a9
-
SHA1
c18c5e0bcd833807595eb3a963ec396bc5d1e94f
-
SHA256
20c1285998103c38c171ee89e7da9470598f82d640dce65ae1e201df899fc5dd
-
SHA512
b6c6b43186d6d1c37b6d8c6b2796d9b665602a410d5c3410b68b9dcc66b97afa6eaf4dd64eff35ddb0bb2d38d70bf563a3482e0a8b687aaf5103a2c21bd57757
-
SSDEEP
384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN5vX:Dv8IRRdsxq1DjJcqfs/
Malware Config
Signatures
-
Detects MyDoom family 7 IoCs
-
MyDoom
MyDoom is a Worm that is written in C++.
-
Mydoom family
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_84f4f2990cedf0d6ded320a25b5620a9.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_84f4f2990cedf0d6ded320a25b5620a9.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\services.exe"C:\Windows\services.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312B
MD5c15952329e9cd008b41f979b6c76b9a2
SHA153c58cc742b5a0273df8d01ba2779a979c1ff967
SHA2565d065a88f9a1fb565c2d70e87148d469dd9dcbbefea4ccc8c181745eda748ab7
SHA5126aecdd949abcd2cb54e2fe3e1171ee47c247aa3980a0847b9934f506ef9b2d3180831adf6554c68b0621f9f9f3cd88767ef9487bc6e51cecd6a8857099a7b296
-
Filesize
25B
MD58ba61a16b71609a08bfa35bc213fce49
SHA18374dddcc6b2ede14b0ea00a5870a11b57ced33f
SHA2566aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1
SHA5125855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1
-
Filesize
311B
MD57aff9ab510d3978e4375fa686729f3d1
SHA19dac99bb152e6278294fa19008f16662c988e205
SHA25664e0b3228ff8de15e5a74e7ff8b7cd163fcbf638f6380aaa6fbee8e40cb2c1a1
SHA5123d73380958518a5967b9c0d74f239fd15c694d3d957135d61955bc4afec548efcd5434bd3b37ab8efacafbd7672d969c7a3fce9653e78a3f11793a78ec2867d9
-
Filesize
28KB
MD54bfda57a7fcceae460e764ee11183a46
SHA1cbe98e5ad04df71b34cd945b3712e089ce1e0fec
SHA2566fbe023041fdfd9d6caff1fa910f6fe5661b299050a7feb342a34b4b4cf7d0e3
SHA512d06c403a28388ab3fd49c0db18d6f21085536ab95ea21fc4a240dd24c15b21ec3f9679629640bad3cdaf0101208fefde5256648a8c01d1dfac9c892148da728d
-
Filesize
1KB
MD5d27d68b6c8db9be1840037cc5b1b97d2
SHA16c42010d9b364080f32e375f7781f24cd16392a9
SHA2568fb3ec44daf6bcb74fbed40fad39f4d7a00bd1c21daa6b60e304cba1fcca2b63
SHA512bf2a60355c2b7feebbaf7237e8074d5bcf223b66214a995e2557bc6c0b94e2a085fdc252114d112f77a7f273b4f13767f62fdadb081414cfc099bab7a2592f82
-
Filesize
1KB
MD5234d1d91464b53ceccd1fb78a4c01541
SHA1d34aa5c196f21b760d6e041da9a1c717eafe73ad
SHA256772b352ac2f5be662b83c44a4da6ef8b9aa3dc359456d1adceb6b54a7a2ef323
SHA51205aef672866bb8099138fc4723aca6b158516c8f30c7ad57500f480cc094c30ddf0e5f71e4f82135c7558298d3f4f6c5d102b922c8ee9bdbffcdf7211e590859
-
Filesize
1KB
MD58f45abc4d583f4b84109b84d82b08665
SHA139c9261986121bb0adaa0610a142f0f39138d90a
SHA256780913e327d9ac13d2d265139ea93178886907490a205d133abc6cccd7b633d1
SHA512063429ba9cfd2f5090f0c5d07b67ea2fdac65fe31646a300d293f9c711cea2cc0ab54080a580cb90e9b3b97076a3e8d1e5572c5c9d1032233b77345c503bfeef
-
Filesize
8KB
MD5b0fe74719b1b647e2056641931907f4a
SHA1e858c206d2d1542a79936cb00d85da853bfc95e2
SHA256bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
SHA5129c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB