Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2023, 17:22

General

  • Target

    3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe

  • Size

    432KB

  • MD5

    3b8d0249a4b010dd3be2f1c9422bce99

  • SHA1

    3fa7d098fd576d9bb28e2ca723abd838799cf6c2

  • SHA256

    0c2e0b4ca27d9a6d2486ce7a7c84d37a3a8d83e134ad5d6637a8119b7723de7b

  • SHA512

    7f1ff4bdff19f9fa6b628c8f4ac918e791841e7c823d107e8171f1819d0cc7bac58b71ce7db35bebea61b1e636c932d48b37040e89de342dc26def89235af3bc

  • SSDEEP

    6144:z66+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4aMSqdBFJVkShVH:z6HX5aG782ook65G/id5CV5MvZVk

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\3b8d0249a4b010dd3be2f1c9422bce99_mafia_JC.exe"
    1⤵
      PID:900
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 900 -s 220
        2⤵
        • Program crash
        PID:1564
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 900 -ip 900
      1⤵
        PID:1820

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads