Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_0955ea81ae8ea5dabc0d6e96f0326bed_mafia
-
Size
467KB
-
Sample
240223-e2hsysah31
-
MD5
0955ea81ae8ea5dabc0d6e96f0326bed
-
SHA1
9b2a49a0296eb8d16f21877d761c2f18170e673a
-
SHA256
875c705449b957030414319597282ffe4ab925fac2d3db4685c92f4f760807a7
-
SHA512
fe12a16c2af1972e8c837314b043b535ae96ed25aad956e22f12aa6bb8dd83820748b232d651a1dd1c52104367415561be4fd013742dfd4813a23658b861ede6
-
SSDEEP
12288:Bb4bZudi79L9abI+LJtuTCLEiiKKZHNfXw+Ak:Bb4bcdkL2I+lmiP4HNvw0
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_0955ea81ae8ea5dabc0d6e96f0326bed_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_0955ea81ae8ea5dabc0d6e96f0326bed_mafia.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_0955ea81ae8ea5dabc0d6e96f0326bed_mafia
-
Size
467KB
-
MD5
0955ea81ae8ea5dabc0d6e96f0326bed
-
SHA1
9b2a49a0296eb8d16f21877d761c2f18170e673a
-
SHA256
875c705449b957030414319597282ffe4ab925fac2d3db4685c92f4f760807a7
-
SHA512
fe12a16c2af1972e8c837314b043b535ae96ed25aad956e22f12aa6bb8dd83820748b232d651a1dd1c52104367415561be4fd013742dfd4813a23658b861ede6
-
SSDEEP
12288:Bb4bZudi79L9abI+LJtuTCLEiiKKZHNfXw+Ak:Bb4bcdkL2I+lmiP4HNvw0
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-