Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Email-Worm...NF.exe

windows7-x64

Email-Worm...NF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5c0fb2f91783d0638d716659fa8611812c77dd1ab2b9aba650054b60fd2c6ce.zip

  • Size

    40KB

  • Sample

    250327-r2g8msvr14

  • MD5

    912386aec1a81eb111c0ef731a08c984

  • SHA1

    0307ee1385b4b879337e877eb6a605a31208a16d

  • SHA256

    e5c0fb2f91783d0638d716659fa8611812c77dd1ab2b9aba650054b60fd2c6ce

  • SHA512

    40e59c2353273cea7457bfdd4dbc50bfd5c96f69657bf31ae210608e6332ab0acfad5337c88dcbedb3db4425efde7656278133a7853ad399e93d12c7d1fd6d6e

  • SSDEEP

    768:KDqcsDR9J2OIWS9hrSUsCkN61mqT8PQDSkxIyaEOM3FiZ9GCZ4hVr3:KDqn9UOe9hr7W60qQIDDxI/EMTGCqhVr

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      Email-Worm.MyDoom.NF.exe

    • Size

      44KB

    • MD5

      f0a4e1b9f16bedb637748b0ae2d38b0b

    • SHA1

      36a61581ee833366a2f75c900cba601a3b317105

    • SHA256

      0ead89a60b4d19bfca4a7d25391acf27e21a2e921eeb45327e1e23737f89a806

    • SHA512

      3754150ab510d9bf8b4f1cb98edd16616af5e0bcb777c821368573b53e2a76590568a0d9812ea4e4ccf0171e912ede3240d00b35c437b8f0696585276a3472d0

    • SSDEEP

      768:SCIqdH/k1ZVcT194jp4yEP5w+814Rz6C3+SOGw8crAmvGFpUqMt:SNqaLV8a6yEPe+8KX3JM

    Score
    10/10
    upxmydoomdiscoverypersistenceworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks