Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20/02/2024, 04:03
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe
-
Size
239KB
-
MD5
8cfd98c46c2f86c5257f1d808291a0a5
-
SHA1
b8f37c3c479ef913c6b693589b62bcfe916b16ba
-
SHA256
3bd9eb065afe29ea1b036ec3a2a366cf2720a3b070f66da7bff897dbf9c37c57
-
SHA512
2fc974639dc869d34ea8fbda5125bbd950b9db274224fa702c6e459d8103f693961187dab711825c6c9e854897b96dc413cf89fd91f4a96dbca232945a3ca5d2
-
SSDEEP
3072:UPQeyM7oECS7CY7Do+Q64oXZBeqGDIXRHPaF39hrbUpEHXfEkfX6F/:U4Q7ojS7CYvzzXZ1G4RHPaF3SuX8/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2304 2256 WerFault.exe 14 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2256 wrote to memory of 2304 2256 2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe 28 PID 2256 wrote to memory of 2304 2256 2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe 28 PID 2256 wrote to memory of 2304 2256 2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe 28 PID 2256 wrote to memory of 2304 2256 2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-20_8cfd98c46c2f86c5257f1d808291a0a5_mafia.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2256 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2256 -s 362⤵
- Program crash
PID:2304
-