Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-26_6ef9eb531fd516f470c8ceae141e2ee3_mafia
-
Size
14.0MB
-
Sample
240126-me5yzabdf9
-
MD5
6ef9eb531fd516f470c8ceae141e2ee3
-
SHA1
52cdacceebe2d3eaeafd27147c1d9ba7b29393ed
-
SHA256
f37147d4bbcaf8b05f96820aaf8d148adb18336e3f01cbecb7b5f4b21e58c845
-
SHA512
8009f7e51fa9570a0ebbc2a1e1f996d2226c7d8ad6f3ac80ba4184a8f69344d3c0eee80e18951cf85f55a9da1d371c7d82f9048c6034972844e29312ce2a86b8
-
SSDEEP
393216:5wMYHSUFvsLSO3xbg5/tKjCV8jbbWXxicoUYo7wRTW8NCILTR/:OVaSO3O5/tqTwgCYo8RhEILl/
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_6ef9eb531fd516f470c8ceae141e2ee3_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_6ef9eb531fd516f470c8ceae141e2ee3_mafia.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-26_6ef9eb531fd516f470c8ceae141e2ee3_mafia
-
Size
14.0MB
-
MD5
6ef9eb531fd516f470c8ceae141e2ee3
-
SHA1
52cdacceebe2d3eaeafd27147c1d9ba7b29393ed
-
SHA256
f37147d4bbcaf8b05f96820aaf8d148adb18336e3f01cbecb7b5f4b21e58c845
-
SHA512
8009f7e51fa9570a0ebbc2a1e1f996d2226c7d8ad6f3ac80ba4184a8f69344d3c0eee80e18951cf85f55a9da1d371c7d82f9048c6034972844e29312ce2a86b8
-
SSDEEP
393216:5wMYHSUFvsLSO3xbg5/tKjCV8jbbWXxicoUYo7wRTW8NCILTR/:OVaSO3O5/tqTwgCYo8RhEILl/
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-