Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2023-08-26_7a07f55857e4b8502137a211b158d4ab_mafia_JC.exe
-
Size
255KB
-
Sample
231011-qzh7gscd34
-
MD5
7a07f55857e4b8502137a211b158d4ab
-
SHA1
80ee6656759f0fe251cfa4a81a43024ce4c096ed
-
SHA256
f0a6eff7660e788816b7363554291cd7f0bcbb27cc636c96d0c67fb2928f7fe2
-
SHA512
f7b05bba81731b7f0d5aea809346a066d28405068f5dff4a9b940ac50354a5ce8dfeda55857339c8204bed0b626b7b01b2c3d4aab4b27d07eeebe98fad7f9b74
-
SSDEEP
6144:o64tXafE0Mqpm+SKAqpByuqPoEbLvRdvf8:o68r0Mqpm+SCB3KbLzE
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_7a07f55857e4b8502137a211b158d4ab_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_7a07f55857e4b8502137a211b158d4ab_mafia_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
2023-08-26_7a07f55857e4b8502137a211b158d4ab_mafia_JC.exe
-
Size
255KB
-
MD5
7a07f55857e4b8502137a211b158d4ab
-
SHA1
80ee6656759f0fe251cfa4a81a43024ce4c096ed
-
SHA256
f0a6eff7660e788816b7363554291cd7f0bcbb27cc636c96d0c67fb2928f7fe2
-
SHA512
f7b05bba81731b7f0d5aea809346a066d28405068f5dff4a9b940ac50354a5ce8dfeda55857339c8204bed0b626b7b01b2c3d4aab4b27d07eeebe98fad7f9b74
-
SSDEEP
6144:o64tXafE0Mqpm+SKAqpByuqPoEbLvRdvf8:o68r0Mqpm+SCB3KbLzE
Score8/10-
Modifies Installed Components in the registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Registers COM server for autorun
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-