Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2023, 18:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
65851ca91d1ceff52f6957f3419255f8_mafia_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
65851ca91d1ceff52f6957f3419255f8_mafia_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
65851ca91d1ceff52f6957f3419255f8_mafia_JC.exe
-
Size
979KB
-
MD5
65851ca91d1ceff52f6957f3419255f8
-
SHA1
4749ed4a1764efc1ad1378d873272fe6e60d1744
-
SHA256
d47b9c4cc2b4938c3a7b2d8967a210909910d967717d727035bd8bb70278504b
-
SHA512
00506f7aae4b288f83f28cd545c743a1c979d547e915b7e2743ca06869828bf7f43a89127da857953277fa66af5e272101dcee75db1bdd9612da97d1d229082d
-
SSDEEP
24576:2Feu8IxBq/K+byAhIONQhVc71R3I4WzwFTP3aKl4:2Feu8IxwPAhVcRq4WATPL4
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 396 5052 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\65851ca91d1ceff52f6957f3419255f8_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\65851ca91d1ceff52f6957f3419255f8_mafia_JC.exe"1⤵PID:5052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5052 -s 2202⤵
- Program crash
PID:396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5052 -ip 50521⤵PID:2276