Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
24/08/2023, 16:10
Static task
static1
Behavioral task
behavioral1
Sample
831246a536389a859ff97bae396f1917_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
831246a536389a859ff97bae396f1917_mafia_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
831246a536389a859ff97bae396f1917_mafia_JC.exe
-
Size
2.6MB
-
MD5
831246a536389a859ff97bae396f1917
-
SHA1
dfc789f89bff6531f7f00aff7c63af2acff1271e
-
SHA256
06c5cc06fe8c6d2f568c2ea61802ec786b478ca79e102e0ce185d8f48adb8ea2
-
SHA512
a9146172ed59eb16faaeefb81e58f1da5f856f3f0e6e004b7bbd75ed09cf6f3c8a51a9b6aba5959e96dccabaed4b101a7b496c9eaa564e8b546511e246256177
-
SSDEEP
49152:bkcJVFfs6MlomOqdfsQnRKjJsffk3mIqCng26kSRhCIFfrjwY8AZ/WOglj85W/Kt:b7JVYomPfssRKjJsHk3mIqig26ksCMwu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3124 1576 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\831246a536389a859ff97bae396f1917_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\831246a536389a859ff97bae396f1917_mafia_JC.exe"1⤵PID:1576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1576 -s 5402⤵
- Program crash
PID:3124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1576 -ip 15761⤵PID:3920