Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11/01/2024, 05:55
General
-
Target
2024-01-10_b0ed58137bec6d75102b6976d306da33_mafia.exe
-
Size
428KB
-
MD5
b0ed58137bec6d75102b6976d306da33
-
SHA1
77cbff4fde1f0d96823af5a8e88e470f931534f9
-
SHA256
6f1da6292586fa2b7c0c66954d6586bb3c23c9f11b86a0e289ad94df28d85592
-
SHA512
f94c39012ba1ad4cf31723930408f7fdeb256a36ea7867b8872a223d9e3b9f952d729f20e4efd9ef37068222c7fb1efc7d999ab9ed4d7d4226ec37553f411b3c
-
SSDEEP
12288:Z594+AcL4tBekiuKzEr1x8wxokdvD8vk0R2+1U0il0l:BL4tBekiuVrv8BC48G25l0
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-10_b0ed58137bec6d75102b6976d306da33_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-10_b0ed58137bec6d75102b6976d306da33_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\992.tmp"C:\Users\Admin\AppData\Local\Temp\992.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-10_b0ed58137bec6d75102b6976d306da33_mafia.exe 6F0902D078D791B0405AB56A75147384C1F6CEBEDF49470CC27B3E76846EB5B2406597751D2BAC2E32930DF3B468C2F57B919579B2C14B98EEFF8230667EC1402⤵
- Deletes itself
- Executes dropped EXE
-