Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-03...ia.exe

windows7-x64

7

2024-02-03...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 05:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-03_b3c3d88c4e645c96b06372450bd7634e_mafia.exe

  • Size

    468KB

  • MD5

    b3c3d88c4e645c96b06372450bd7634e

  • SHA1

    b5abfa06dbf8abd1182243738aa307e3a5012506

  • SHA256

    23c97ae163bd2422893ef9dce2a1fcc090c6115a4e02151080fd62cc8b46d542

  • SHA512

    ad8f3e68011a67016fe9b87d76c74bacf691b33f46b1e6df5c355000198b67cfff9001d1b971e7f247da74480cbebbb6c6f6cd9bab0e350947fe7f27d26dc91c

  • SSDEEP

    12288:qO4rfItL8HGTT/p4Wj92cVN03kDbs7pfS+7bWmeEVGL:qO4rQtGGTKW52cP03kbs7pq+umeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-03_b3c3d88c4e645c96b06372450bd7634e_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-03_b3c3d88c4e645c96b06372450bd7634e_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Users\Admin\AppData\Local\Temp\A1E.tmp
      "C:\Users\Admin\AppData\Local\Temp\A1E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_b3c3d88c4e645c96b06372450bd7634e_mafia.exe 789D56DC3469D5BF4E8658690572A33FDBC8BD64024E46F601636D80D609D4EA96596A2C472307B04F6FEDE7D4012B07AFF4CCB9ADC000BDE80BE3585A356E9B
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\A1E.tmp
    Filesize

    468KB

    MD5

    86c5e3184bdc73c28e2196484578c26b

    SHA1

    e41ee5a4df729bd62004ee51ea88ac672c886519

    SHA256

    fe24831a3eea13bed130155c711ae8f06c4417c26b0acc1a4718aacedd084366

    SHA512

    856a2d44ba6fc4eb4277fa09d67e79c1d97456ac167538b6d8e829491dcf7418def171b798150188386ef0038ca5dd61ccf4568885f05a6c8c857f7a23e03a09

    Download Submit