Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-01-26...ia.exe

windows7-x64

7

2024-01-26...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 08:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe

  • Size

    443KB

  • MD5

    5d6757988a69991efec8b19240fbbd18

  • SHA1

    535ac67f7256c29f3050145c232372b1ed8b0c2a

  • SHA256

    9c907b2ae3d5ed711452d94be7843974b0a011bfcbd80f2ebe666379bf3f3638

  • SHA512

    e0533d54bd0284612041fb90b79557002dd04f604d7bf23b8c12961a41d8cb16e0d2b992c4f0f60f712e25986a4bcf3cbfbbddf3ef688f7c0dfe124c45b61165

  • SSDEEP

    12288:Wq4w/ekieZgU6K9+dddB8d5bDGHiTdlRFGgxElMa:Wq4w/ekieH6K9u8jbqCJlGgaP

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2296
    • C:\Users\Admin\AppData\Local\Temp\1101.tmp
      "C:\Users\Admin\AppData\Local\Temp\1101.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe 2A736FE43148BA9AA276BAB480B7615D95C1FCFBA038E3B45020D23D9784D9D59D996CC8C792779C727657501E214556CAD18284B019D0BC58317537BE56C009
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\1101.tmp
    Filesize

    443KB

    MD5

    11bc0363e80b285c6cb12a1a3c8c48fa

    SHA1

    2aff064e0b7840fa94d009d30e038f51cee18240

    SHA256

    4d117e83c6f13ed3e929aabc276cb3fb0bd698f0328de20457d779bff3ac47d6

    SHA512

    5fc1b740ff9befa326375ea38188d5efa441b8e375bdfa93ec1feb8427f33f48d58bacdf278a60e40f2c26393c2dbd7cb4cceb300ac5fbc79a4f98ab075316f4

    Download Submit