Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-13_f111aaf032d217ed021437b992cc62dc_mafia
-
Size
467KB
-
Sample
240213-w2vwysgb86
-
MD5
f111aaf032d217ed021437b992cc62dc
-
SHA1
258615f7f650ef52302db8a62b1c9eea2539d850
-
SHA256
c75f7bc6508305cf6c7887a4d05f93d64e4bc4641a2c7150a8d6b523d51fb6d5
-
SHA512
75dddfa018bd49e20d32ecf86d67f777a4d4fb55db46f600a18000f45d2306fd4bf60964d96f41eb6c28726be8b8d20d43e1a9bf1617b3949832d6f644a74896
-
SSDEEP
12288:Bb4bZudi79L57cg9I4x1DOCtvySFEnjAk:Bb4bcdkLzxwuEnr
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_f111aaf032d217ed021437b992cc62dc_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_f111aaf032d217ed021437b992cc62dc_mafia.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_f111aaf032d217ed021437b992cc62dc_mafia
-
Size
467KB
-
MD5
f111aaf032d217ed021437b992cc62dc
-
SHA1
258615f7f650ef52302db8a62b1c9eea2539d850
-
SHA256
c75f7bc6508305cf6c7887a4d05f93d64e4bc4641a2c7150a8d6b523d51fb6d5
-
SHA512
75dddfa018bd49e20d32ecf86d67f777a4d4fb55db46f600a18000f45d2306fd4bf60964d96f41eb6c28726be8b8d20d43e1a9bf1617b3949832d6f644a74896
-
SSDEEP
12288:Bb4bZudi79L57cg9I4x1DOCtvySFEnjAk:Bb4bcdkLzxwuEnr
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-