Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-20...ia.exe

windows7-x64

7

2024-02-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/02/2024, 03:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-20_a17351128ce4f1dc5873af4a2b6069b2_mafia.exe

  • Size

    433KB

  • MD5

    a17351128ce4f1dc5873af4a2b6069b2

  • SHA1

    c5e54a305d6ec8f48f13db8b0a75430a36d47a8e

  • SHA256

    50df92fd44d2e0c9fc4f1f8dd4b576378336b2c4d2ffa1a7789871e45612c662

  • SHA512

    0c490226223f83282cfbb8af55994be9fb0a518b1189644c8ec94cfc73d31823a70760ba1fbd0b8731c8778c3cbb12e812a0f09da543b77611be0d6d75fa7bb3

  • SSDEEP

    12288:Ci4g+yU+0pAiv+aqjM8isNAvQcy27H2E1lQn:Ci4gXn0pD+1esYnWEU

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-20_a17351128ce4f1dc5873af4a2b6069b2_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-20_a17351128ce4f1dc5873af4a2b6069b2_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1188
    • C:\Users\Admin\AppData\Local\Temp\1075.tmp
      "C:\Users\Admin\AppData\Local\Temp\1075.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-20_a17351128ce4f1dc5873af4a2b6069b2_mafia.exe 05FC042B1181451A130E083AABAA1EE41DC66F05FFAD60FE8AD304D8AE44D43F1C93C0353A3D5D8F4D1FE55B31A695D3749CD755BC7A80CCCDF265005A80B97D
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\1075.tmp
    Filesize

    433KB

    MD5

    777d209d825dd3e3471b439766216f7f

    SHA1

    55298e2e9a696bb12f3d18d73aa45dceacc25c58

    SHA256

    3b872f078a7cb096904e2c9e841e35a7034cc1e3fa87653cd049b6c3cedb87ce

    SHA512

    a35468edd664e5582242644425b9df924dad076405fa2b3c4e0d5593e183cc3ee05cb95bb816aac2a459815098a6511689816e5578acf11584738bd84a45dc4f

    Download Submit