Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-03...ia.exe

windows7-x64

7

2024-02-03...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 13:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe

  • Size

    443KB

  • MD5

    9663991a770a8e6276aff578be577b61

  • SHA1

    7562ba14998f7e7001d1f02b566f648de76184f7

  • SHA256

    e3f2e0f35873fb0aae0aeef727dce1db697e1d5ab95b29d611182344e928001f

  • SHA512

    a744f2c682b680d9cd82b1537fb00bae4299822ed94cef7bc58504f484428ecbebeab6425ddbf0e01f87e540cc15273cb10820a75266b1a1d5cbb2862bf73e23

  • SSDEEP

    12288:Wq4w/ekieZgU6Bv8/vHNC0dUNuy4EWqzlMa:Wq4w/ekieH6NcHBUyEWyP

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Users\Admin\AppData\Local\Temp\78F.tmp
      "C:\Users\Admin\AppData\Local\Temp\78F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe B8CB8AEECE5E584DB9E1CFC0309DE6516D2A46075590D596A4F6DFE030E4077E7F4A9EB5EF2CB56F3D905F1BC104FE7AD6D96EAFB3E4B792984B1AACCD2B312E
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\78F.tmp
    Filesize

    443KB

    MD5

    7c8f78cf8b254e21580ff20a097f2931

    SHA1

    8a1b2b751f1aaa80d7b9ce873fb9d2c1ff55f4b1

    SHA256

    cc8fefb61e0c38ecea8f52d0e55daeabee15437f8560bc5d5b9d18964d51514f

    SHA512

    310b095d46780de49c29db2c26a199c610ac64e9f742eb967b83e4ba0df5d921b3c07c26e3829c4e69dab072362a22480a3b6191237e889bb65e9bc176a47baa

    Download Submit