Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 05:42

General

  • Target

    2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe

  • Size

    433KB

  • MD5

    4b329bbe869beabfb592f3a8c8dd3390

  • SHA1

    74fce144ad8d9691f1da9e5654184ea5d8013390

  • SHA256

    66ccd0f16e66fb6fa109d091546fe1ed2396c061c778fb2d1f00423520e07a0a

  • SHA512

    42fa0ed30ade0d41f437ae788f38f0f9879e5ee62a9f22b58d2c3e0cf12a7eba80651d579f225a5713871ff51b618f2123a7ac921731d5b7bec4603e985c1b7b

  • SSDEEP

    6144:Cajdz4sTdDyyqiOXpOd0p6Jiv+vtvMGgj21/gMgUtDNW56/x9XlIpCy3GICDQNwp:Ci4g+yU+0pAiv++Ggj9Zg59X0/2NDXRn

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:644
    • C:\Users\Admin\AppData\Local\Temp\4229.tmp
      "C:\Users\Admin\AppData\Local\Temp\4229.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe BD4E5FAEBCB18240499AE6E471D7DB43FB9AC7BC8D53D96C07332E8A05411B3FF48F4215D7D4BC7E6DB5473DAF35ADBD94167A15871802F3FD0B897CCAE7D8CB
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:3976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\4229.tmp

    Filesize

    9KB

    MD5

    15733db29792e38eb550d8729a329d31

    SHA1

    a12fc352f7186e95c82e565fdb56c5fd3abd9bab

    SHA256

    1de937318840e1489ccbeb812e7c0ada6a9c7a716f8e1224171965b11f7e2155

    SHA512

    ecb9c5cc35d72179498014295904f1c5e3f52189bc8f4b7b9185999f873d1f7f56ca5751ee97463cf35c8b93768f2df8bd3a63ea0b123dd39bff24dc9d712050