Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-04...ia.exe

windows7-x64

7

2024-02-04...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 01:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-04_c379c159699b190179eafab1d29333d1_mafia.exe

  • Size

    468KB

  • MD5

    c379c159699b190179eafab1d29333d1

  • SHA1

    442eaefc4eb09a04ea2a989a6940d2c8278db1a4

  • SHA256

    94fc49c83c912a6bea01f8883e5649a4cd99a8566fd471a6d04ea6284babacdd

  • SHA512

    a8dcda67e9e0ab6a34d88614f15658782d89db32b4cde083f2648916ecfcf183af29eaca10c608fd06e86d4a08eea484848b720ebbcfaf024af027c8209f17b3

  • SSDEEP

    12288:qO4rfItL8HG2mgLnSyKxW+rdJbmMTFdZBb8f7bWmeEVGL:qO4rQtGGCSyK3XZBb8fumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-04_c379c159699b190179eafab1d29333d1_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-04_c379c159699b190179eafab1d29333d1_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Users\Admin\AppData\Local\Temp\89F7.tmp
      "C:\Users\Admin\AppData\Local\Temp\89F7.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-04_c379c159699b190179eafab1d29333d1_mafia.exe BFDA9AC131520E30564DCF6ACF84681EA36AD3D48B1A2F18DFF4698813D442E02103EC854E0F071532AF1504337B07857C64355AA42FA7439572156CA24D783B
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\89F7.tmp
    Filesize

    468KB

    MD5

    b5285f3397d7e4a6aa8fd0624466532a

    SHA1

    976e2f2ce923d206670660923c054f5cf3df0dd0

    SHA256

    727f0859990ae71eeb603e159c507d0b751899b4e81c260c9d7eec36f64ebeda

    SHA512

    5664774ec277f8c1d7b19b719b0360be3f331e4229c65d44b2a75919bc3cc0776468ccf77ba01ab9b972c99aa3d76c63bfa4766252c615639794534689f484f1

    Download Submit