Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2023, 17:05
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
-
Size
466KB
-
MD5
71f8aabec6fde13c2c95f31bc662be91
-
SHA1
ef84eb874a861a8aeeeac6d91841b481f8d456a1
-
SHA256
579ceb1a6d36b365b1dbdcca65f38473defc860b1e290dd64e2e93172fc702b5
-
SHA512
ea69679650d866c5bbe97c66ecd111ac55e13a6e4aea39c401fa2f51b7d3416bbc578e3b42df832cc264e2d1998f3022b1167e2b508b3c40ec3c38aa973dfc2e
-
SSDEEP
12288:aSFEu8sNNaKbefcq/N3l0esV+xDxzKweXylJ1:aSVLas9iZkV+pVKlylr
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 960 3596 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe"1⤵PID:3596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3596 -s 8242⤵
- Program crash
PID:960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3596 -ip 35961⤵PID:3160