Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia
-
Size
465KB
-
Sample
240111-glb2kshbem
-
MD5
8ab84328a353ca0378f8e66f25bbddc0
-
SHA1
4b4b4cdd7604f0d936bf38f537ceb3068b5a38ac
-
SHA256
580bd60a0f390fab78569736ccb84aa91db94245d84a53338c2658738e7a8c7b
-
SHA512
3f9e83042021bbdfb78d5152f34ad939f0d5bec7b968913384fc97638ca880197e016c70c13b11c400966999fed17d001b5f883a68e1477475a3e714c2699a64
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStcwfmC69/Ra3JzM9hUNDw/w9uUhZxJUeA:Bb4bZudi79Lz9C69/RW1M9hUN/9FTTA
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia
-
Size
465KB
-
MD5
8ab84328a353ca0378f8e66f25bbddc0
-
SHA1
4b4b4cdd7604f0d936bf38f537ceb3068b5a38ac
-
SHA256
580bd60a0f390fab78569736ccb84aa91db94245d84a53338c2658738e7a8c7b
-
SHA512
3f9e83042021bbdfb78d5152f34ad939f0d5bec7b968913384fc97638ca880197e016c70c13b11c400966999fed17d001b5f883a68e1477475a3e714c2699a64
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStcwfmC69/Ra3JzM9hUNDw/w9uUhZxJUeA:Bb4bZudi79Lz9C69/RW1M9hUN/9FTTA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-