Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    33s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/07/2023, 00:02

General

  • Target

    cfxmafia_loader.exe

  • Size

    4.1MB

  • MD5

    560a812c47a89f5eabaa84cb0230ddb5

  • SHA1

    4b31730bb9db0382bc1e32e1715c4550e2a4a6b7

  • SHA256

    b94360a03bde1061fabeaf40d2a8923e06bfba470e5da7dd89036a55f2fd756f

  • SHA512

    1aa8596b7990904c593835dc7a32fcb6db98112738adac0d338ef7440c941791695722a606bae8a66d7e6c870dca2d4ef50415da2c13cd5f0f400e42266addee

  • SSDEEP

    98304:APUwhdGjDH97jx5zTYfBkk2WJLwlr5qA2qBBRbUz:UUw7GpzTYfBoWJLwFRvVUz

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cfxmafia_loader.exe
    "C:\Users\Admin\AppData\Local\Temp\cfxmafia_loader.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:220

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/220-133-0x00007FF74C860000-0x00007FF74D0A5000-memory.dmp

    Filesize

    8.3MB

  • memory/220-134-0x00007FF74C860000-0x00007FF74D0A5000-memory.dmp

    Filesize

    8.3MB