Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-01-23...ia.exe

windows7-x64

7

2024-01-23...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 21:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-23_39f5c6da253d697dde3473cf645b475c_mafia.exe

  • Size

    468KB

  • MD5

    39f5c6da253d697dde3473cf645b475c

  • SHA1

    2d9d9ea07cf08053e026ea1d6507bd883e483ad7

  • SHA256

    a3a124b2c2bed8511f6e6fb57f4614c87ab0d841fcac543300df49097c7a21f3

  • SHA512

    6b54eb901b1435d271b017eb580ac1392d3f8e0990c89833f6df3fc8e6960cd4cd1daa25c576f1c1c29b68f93fceaf329b017df9418632cb4a1052c00e448320

  • SSDEEP

    12288:qO4rfItL8HGT3iVEkuM8CGR+EWdmEI2KNLX/7bWmeEVGL:qO4rQtGGT3iVEkN8CpKNLPumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-23_39f5c6da253d697dde3473cf645b475c_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-23_39f5c6da253d697dde3473cf645b475c_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Users\Admin\AppData\Local\Temp\7427.tmp
      "C:\Users\Admin\AppData\Local\Temp\7427.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-23_39f5c6da253d697dde3473cf645b475c_mafia.exe 2DF425FA84CDB03A9A5070FA4159092D123961C5779ADE7254CC879217E0F5A6500798D78E98D29182650FB631F7B87D76D62E02CB0E795CF90298C61EE501DA
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\7427.tmp
    Filesize

    468KB

    MD5

    1b817014807636c07b123d1699e12238

    SHA1

    14322362059ab5f36c70302e89ef629392be863a

    SHA256

    91b59914a930ae3a627e14f92dbddc78deccfd3004cda11e261635b42a0a3d1a

    SHA512

    6dd5362a73055be490fd0788b5a8bcd2d4a6242b0399555bf8a1e3d8e6a6011ad6c91ab9ea8a71f267f06f6be51d6d34609a80f03810ab0ec7695068885ae74f

    Download Submit