Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-23_bd64d4f1190996d614c25459f9e3a043_mafia
-
Size
462KB
-
Sample
240123-t2mt8sdah8
-
MD5
bd64d4f1190996d614c25459f9e3a043
-
SHA1
0cc19bcfaba95afe6a77732aace3b041f6e0b331
-
SHA256
608da44d210ec6d2dac6b3c0243840332a4dfd7cf67d72d7b3f157341774efe6
-
SHA512
af86b356c0847c94550c4b8e1bc3d91a535eb7db8057319db9ce977460218fdb6461da814763d0cc4eb7fc308bfe7cb61eb8f5078850a4cfe2444059174a94c2
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHP4Cinxnf0tFitfBbAWaKFPg/PwKb7KQsH5f:zJrIik3eFJ8GZbAWaTnBbe9
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_bd64d4f1190996d614c25459f9e3a043_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_bd64d4f1190996d614c25459f9e3a043_mafia.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_bd64d4f1190996d614c25459f9e3a043_mafia
-
Size
462KB
-
MD5
bd64d4f1190996d614c25459f9e3a043
-
SHA1
0cc19bcfaba95afe6a77732aace3b041f6e0b331
-
SHA256
608da44d210ec6d2dac6b3c0243840332a4dfd7cf67d72d7b3f157341774efe6
-
SHA512
af86b356c0847c94550c4b8e1bc3d91a535eb7db8057319db9ce977460218fdb6461da814763d0cc4eb7fc308bfe7cb61eb8f5078850a4cfe2444059174a94c2
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHP4Cinxnf0tFitfBbAWaKFPg/PwKb7KQsH5f:zJrIik3eFJ8GZbAWaTnBbe9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-