Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-01-11...ia.exe

windows7-x64

7

2024-01-11...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 06:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-11_afde6aeff1188dbff7e22c65ae6aaedd_mafia.exe

  • Size

    468KB

  • MD5

    afde6aeff1188dbff7e22c65ae6aaedd

  • SHA1

    fbaf017e89c02f388695e264f57100a8a7b11d2d

  • SHA256

    db7cacb6feef2c3081bb100a5219f5ee6fa4f2b6efb50b6f1aa8ca56be1d4f29

  • SHA512

    518650ddef88ec8997b3df286789f454cfc6fc2d458be019e9e9257b4d22bfd03b74ecd0929422ceaba29a3c884fd495d336ca98debdf874e6c781e904178b88

  • SSDEEP

    12288:qO4rfItL8HGz4loXXkcRsq9yZdHuv8jgbovfL2U7bWmeEVGL:qO4rQtGGIvce2Xv0tpumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-11_afde6aeff1188dbff7e22c65ae6aaedd_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-11_afde6aeff1188dbff7e22c65ae6aaedd_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Users\Admin\AppData\Local\Temp\7ADB.tmp
      "C:\Users\Admin\AppData\Local\Temp\7ADB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_afde6aeff1188dbff7e22c65ae6aaedd_mafia.exe 03952DBA4DD223F37C367999578279F60CDD3BFDF2FC7E05DF3EB27A9C9EC86363F49010DF0E7C1978E0EB31598E3DE379F2A67A2AFF7ABFD7C6AE0CC3BB69B0
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\7ADB.tmp
    Filesize

    468KB

    MD5

    d6426aa4a782bb813b113144c01e1930

    SHA1

    da22913f11287ca1faba73c00e9cebccc923c069

    SHA256

    53bf4755f8b9c83403089d76a138cbe1060e68ca24185142c10d47390b1a7ffa

    SHA512

    1475eaba96bd6d486faaa8ad2f18b5e4490363d7127858e42cf0efa700d72d433950d77611923b7fb52d4bdb2341d7fb116a5e5454d9e91749c21362842749f4

    Download Submit