Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-28_00296d2b7030c588f0cab2796e81f82a_mafia
-
Size
465KB
-
Sample
240128-bq8cpaaaem
-
MD5
00296d2b7030c588f0cab2796e81f82a
-
SHA1
4d85b4cc826409ab51ca3ff8fcd1c01fce3f3895
-
SHA256
833cf725fbf9b20b5a92be36b6da386755fc9b76e882b7acf48024ce404d42c2
-
SHA512
5e0db520e663b7f9722c063bb0ef1faad39112ed84718022014e0b40bd2da9322e644a5a9b05c309f90602077eeb92f0c2fa650b8f3e8b5bab9e59cbbc981f39
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStP7qVz4YyydfLfhmhzTFjppd/JFuomA9XA3p:Bb4bZudi79LYC7kzp9fJf9XCuxA
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_00296d2b7030c588f0cab2796e81f82a_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_00296d2b7030c588f0cab2796e81f82a_mafia.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-28_00296d2b7030c588f0cab2796e81f82a_mafia
-
Size
465KB
-
MD5
00296d2b7030c588f0cab2796e81f82a
-
SHA1
4d85b4cc826409ab51ca3ff8fcd1c01fce3f3895
-
SHA256
833cf725fbf9b20b5a92be36b6da386755fc9b76e882b7acf48024ce404d42c2
-
SHA512
5e0db520e663b7f9722c063bb0ef1faad39112ed84718022014e0b40bd2da9322e644a5a9b05c309f90602077eeb92f0c2fa650b8f3e8b5bab9e59cbbc981f39
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStP7qVz4YyydfLfhmhzTFjppd/JFuomA9XA3p:Bb4bZudi79LYC7kzp9fJf9XCuxA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-