Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-14...ia.exe

windows7-x64

7

2024-02-14...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 00:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-14_ae5b64e717e425c7679bb8d836502a05_mafia.exe

  • Size

    479KB

  • MD5

    ae5b64e717e425c7679bb8d836502a05

  • SHA1

    10d26252654fe9c00cf4a06aa2f3600526dcff2e

  • SHA256

    560598fc36f7414b529bb1f8fefa5abee086f7542930d908e6ac25c5de403ef5

  • SHA512

    be992f9ae3d2e9bcc0e4991ed04e093531261bbaf9ab6f3e92c721a00107bfcff54e19208393cf17fc0650c9ea17d47458a9307606cbd0ac639e18624ef00d7c

  • SSDEEP

    12288:bO4rfItL8HAc+n9Z9VqjcGAmkS3RUP+RtyZ75UO:bO4rQtGAci9fM/eEdiZVUO

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-14_ae5b64e717e425c7679bb8d836502a05_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-14_ae5b64e717e425c7679bb8d836502a05_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Users\Admin\AppData\Local\Temp\3F22.tmp
      "C:\Users\Admin\AppData\Local\Temp\3F22.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-14_ae5b64e717e425c7679bb8d836502a05_mafia.exe 794D0C3042B3941934A8B5427B4CBBC3F16F8333F6BDBF54D1FAFFA12048F72FB9DD73503145D57C8AFA12754B9D402E9952B15367F627A592430994355F86DD
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\3F22.tmp
    Filesize

    479KB

    MD5

    03340cb4402e25f30b406a2ed841d4ce

    SHA1

    d79e587077a95aaf103ac1dc5b01b7674d0d6899

    SHA256

    3f11a3535bdaa43c23b386e0f928654cf257985f76a59b132f80c6af82587aef

    SHA512

    dde35241260b75d6a9c429c21043c204291a9f6c1a8bba07e4a609cb1b12b133cc293ae5454d9ee711036e5bd7250516927ed9a09e19fa4cc3f876ee53155e7a

    Download Submit