Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 11:55
General
-
Target
2024-02-14_67309052a5aea270f32224e718e4aa1a_mafia.exe
-
Size
433KB
-
MD5
67309052a5aea270f32224e718e4aa1a
-
SHA1
c853265ca8708bb0b77458e9a05bd975a72bf715
-
SHA256
1710b144cd08e7f3cf04378422c4b71841bf803b0bc19ba55bc6871cf193aa35
-
SHA512
4c692836a1e833234a66672195d567ddb1f02514091303ff2fe8d93bfe73ad9c3d42625f40e7505a8491dcedf0cbeec2714e1ebf213a6bf81dfe47372e5f3f5f
-
SSDEEP
12288:Ci4g+yU+0pAiv+YFzc4dZxLu2Kl6/eoDn:Ci4gXn0pD+Dq7LKm
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_67309052a5aea270f32224e718e4aa1a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_67309052a5aea270f32224e718e4aa1a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\36D9.tmp"C:\Users\Admin\AppData\Local\Temp\36D9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-14_67309052a5aea270f32224e718e4aa1a_mafia.exe A000F7F2CBA991CDE898928F472F47F7FCC0A70AA21167784425EC5BCD2C3D35AF14CAEA104C418283D0497499B1DB36CF4492324781A21AD5100C58A45FBFCF2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD566d230cf0df1f9c507187afcbeb1611d
SHA108fb57a39145109a068b230b39fcf7cff8eedcb0
SHA256fd9a7248558b8df42fef3c4981f4fccb3ef968df4b98789cb81f70ce757f3685
SHA512c6b98334d11daac7737d1fdd30c9630780257efb0d312fb052094c132dad6166be4e1035c6d1a0d89714c1adceeff274f822ed48f7fe9de9d0a768e5e8e799ea