Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
23/10/2023, 16:03
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-07_c3df45501018cdfb62cf377e66cc3c19_mafia_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-07_c3df45501018cdfb62cf377e66cc3c19_mafia_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2023-09-07_c3df45501018cdfb62cf377e66cc3c19_mafia_JC.exe
-
Size
1.6MB
-
MD5
c3df45501018cdfb62cf377e66cc3c19
-
SHA1
a26aef2d5f60298ac620bacaae610086c551463e
-
SHA256
3c58da859ecc4e2af3a93e702feb1003a968b12316323001858c58932ff80ec4
-
SHA512
791c17e9ca941024a8e32e0ddeb8ff5c3825ad08e43d9f0f803eecf29e3ea37bd3377b2f776eae4281b99b4aff45a965be222662dcad9980b2375059b64a110e
-
SSDEEP
24576:PCsZd5TKWxFMcN/c5M8SMUi9Grdn7SsvaMQR9TzBhh1xRO3AWCkTTl:H7TvfU+8X9GrNOsvabRbhhE3ANkTTl
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1396 2236 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-07_c3df45501018cdfb62cf377e66cc3c19_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-07_c3df45501018cdfb62cf377e66cc3c19_mafia_JC.exe"1⤵PID:2236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 2242⤵
- Program crash
PID:1396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2236 -ip 22361⤵PID:3060