Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-01_9386ee894fbf5654a11c86d7c9bee2fa_mafia
-
Size
467KB
-
Sample
240105-ggmmhscghl
-
MD5
9386ee894fbf5654a11c86d7c9bee2fa
-
SHA1
c85a4f4beb49fe2e08d163fa0321c978b2ae3129
-
SHA256
09bd623c7c29f0247ff357ddf4ca0fd0e781602902698075226120d6c18771fb
-
SHA512
23466fbd0fc6005e34cba6460425a34a25ff9df6be84fee77ffc0b90928a7da6d3d4428e0dc829fcbd65973f04cf7b2452d78347a4a8fa0f83d3e9b87e4561a4
-
SSDEEP
12288:Bb4bZudi79L1ihhFNF8vyw5Hhy/y3IXy8khcvAk:Bb4bcdkL1ii/5Bya3Iamf
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_9386ee894fbf5654a11c86d7c9bee2fa_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_9386ee894fbf5654a11c86d7c9bee2fa_mafia.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-01_9386ee894fbf5654a11c86d7c9bee2fa_mafia
-
Size
467KB
-
MD5
9386ee894fbf5654a11c86d7c9bee2fa
-
SHA1
c85a4f4beb49fe2e08d163fa0321c978b2ae3129
-
SHA256
09bd623c7c29f0247ff357ddf4ca0fd0e781602902698075226120d6c18771fb
-
SHA512
23466fbd0fc6005e34cba6460425a34a25ff9df6be84fee77ffc0b90928a7da6d3d4428e0dc829fcbd65973f04cf7b2452d78347a4a8fa0f83d3e9b87e4561a4
-
SSDEEP
12288:Bb4bZudi79L1ihhFNF8vyw5Hhy/y3IXy8khcvAk:Bb4bcdkL1ii/5Bya3Iamf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-