Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-22...ia.exe

windows7-x64

7

2024-02-22...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 20:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe

  • Size

    428KB

  • MD5

    b60e7d09ce4c7961256c8df7d493ed12

  • SHA1

    07d3bdd2ef10059105f4c91a868b132b5828657e

  • SHA256

    1055ab66dc46fe1b5ee51d5ce33918406b4573e13bdd83ed94206ff1364ea3d7

  • SHA512

    59c97e3d6297fd4a435fa3a770067cbdfd3b497d204fdbcc0ea98e2ff16c21585188df46ada4a155cf299b6113ec17c29cb18a92c7fc0e753fc654fa1a39b1c9

  • SSDEEP

    12288:Z594+AcL4tBekiuKzErPQLTozVWozj7tD8JkWJyWnbl:BL4tBekiuVrPQToz4ozvt2Jyqb

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Users\Admin\AppData\Local\Temp\1507.tmp
      "C:\Users\Admin\AppData\Local\Temp\1507.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe D4669294C2D77A5C46E94791D59026F8B8642C0C371A53FA0B6CBD3FCE4B4A00018071ABC3C2FC15C0AB0DA80155EB0B1F7BD6A8A75B513D5567572052F26DE5
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\1507.tmp
    Filesize

    428KB

    MD5

    68f41f2dd7fe89b852a92cd4ce4bc5d1

    SHA1

    989954fc224482497e9b56d6076048990bcd9d91

    SHA256

    ba923084c7bfe2bc55cadc67111768a5acad5d8229c8370a20bb924e6b153859

    SHA512

    053b4fe1ece9dffd530b0580a4bae8da6facbcc2ea0502bc55c560f1c9a30dbc1753f575542a32056db87260803890ba3a31d2e36236e29075a771cd5f6ebb91

    Download Submit