Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-18...ia.exe

windows7-x64

7

2024-02-18...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/02/2024, 14:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-18_54977ca0b10e03be5018da24c3ca9dcf_mafia.exe

  • Size

    433KB

  • MD5

    54977ca0b10e03be5018da24c3ca9dcf

  • SHA1

    7ee6188d8dbab955f77e8f5bfc98058c96873d3c

  • SHA256

    cb72f40d569dfc6640594d8ffccd3b10caf757fa3240e72a81d99f959acc1232

  • SHA512

    454256843351c61cc9d9c39498b33b49991e4f8fa04828d470727a3c9791b8321609c06844af1394b563c7bdd23065c49a202b8ad68de9dbbc54fa4a87cee533

  • SSDEEP

    12288:Ci4g+yU+0pAiv+p7vOe+ob9UGN+PZLRyDuS7+WHOHdGn:Ci4gXn0pD+p7vOe1BUGN+xLk+c

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-18_54977ca0b10e03be5018da24c3ca9dcf_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-18_54977ca0b10e03be5018da24c3ca9dcf_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Users\Admin\AppData\Local\Temp\3D2F.tmp
      "C:\Users\Admin\AppData\Local\Temp\3D2F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_54977ca0b10e03be5018da24c3ca9dcf_mafia.exe 9CF70DA051193EABA29236EA4535F5BE9D30CDAFD4C4B419CE2AFF0786C95EA2E81C84ACF20E6F07382C53A869EDC86B3DF24EDAE191407DA896276B838EB71C
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\3D2F.tmp
    Filesize

    433KB

    MD5

    03cb66f000106fc64263a46dfd153311

    SHA1

    b074ede80a15344dfdd4c38585a50b3e8cf425cf

    SHA256

    0eaf5cd34f35b470cce81e866d50dcf0c238a1978cdac65806b7279a8dd90d21

    SHA512

    2bc3dcafd44c0624a960ec4453e6a85f04225afa486500b47ee3ddd0c913fe4f5f84aaf2d86b11fe43243c57134a82b37e1d7116362e661104f2f5273fdc4101

    Download Submit