Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
02/08/2023, 17:22
Behavioral task
behavioral1
Sample
3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe
-
Size
432KB
-
MD5
3b8d0249a4b010dd3be2f1c9422bce99
-
SHA1
3fa7d098fd576d9bb28e2ca723abd838799cf6c2
-
SHA256
0c2e0b4ca27d9a6d2486ce7a7c84d37a3a8d83e134ad5d6637a8119b7723de7b
-
SHA512
7f1ff4bdff19f9fa6b628c8f4ac918e791841e7c823d107e8171f1819d0cc7bac58b71ce7db35bebea61b1e636c932d48b37040e89de342dc26def89235af3bc
-
SSDEEP
6144:z66+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4aMSqdBFJVkShVH:z6HX5aG782ook65G/id5CV5MvZVk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1564 900 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe"1⤵PID:900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 900 -s 2202⤵
- Program crash
PID:1564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 900 -ip 9001⤵PID:1820