Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-20...ia.exe

windows7-x64

7

2024-02-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20/02/2024, 10:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-20_b730e777f69f51b7cb98d8fa7325719a_mafia.exe

  • Size

    435KB

  • MD5

    b730e777f69f51b7cb98d8fa7325719a

  • SHA1

    1eb9580ee27f88c8c8d16939130933690a462ee2

  • SHA256

    64172dfcf2248df25410e72330506afbd989e1a1fc355ec1306b8ebd179e4d07

  • SHA512

    8a145e39c2b64768adb4d3f52b959a72babbab9e9bf042a5569a4d805340ac563d6d611c001139ce2a617b489a8d3c230f6fce971eee415a56f79b7b88da8ffb

  • SSDEEP

    12288:fd4x+ePixnXQjk0j1pNsBUg4T21gnQPiwZSwP:fd4x+ePixAjfj1pN/jnQA

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-20_b730e777f69f51b7cb98d8fa7325719a_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-20_b730e777f69f51b7cb98d8fa7325719a_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2644
    • C:\Users\Admin\AppData\Local\Temp\3EB5.tmp
      "C:\Users\Admin\AppData\Local\Temp\3EB5.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-20_b730e777f69f51b7cb98d8fa7325719a_mafia.exe 80A9BDA5405005F563590E66D919E6D33CBD163FCB94CC5E01CF57E89EFB08A760F2C15E9606049A500E371AEDA94D8D02B959CC3267449B99F9B6770C17BA32
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\3EB5.tmp
    Filesize

    435KB

    MD5

    69ff0ebc8cd0e7fe39537390aea85e9e

    SHA1

    1331395bc1ce82958da5a48f128cd36ac73eaccd

    SHA256

    a327f2028cd180b8da6332a4d249bc01290a411a2568d90dc95ab58a4a2d8545

    SHA512

    f1e0eb8cdfde27991822ef3fc7b67ae56d35ed063296c5476e1e21b1e19cbd3f4690a1352368c10332bc7b17cc4484c25f72089626ef2e8c1a509d73908867f5

    Download Submit