Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 09:09
General
-
Target
2024-02-28_e806fe42f27c211b0dfb428b87d0c0ed_mafia.exe
-
Size
443KB
-
MD5
e806fe42f27c211b0dfb428b87d0c0ed
-
SHA1
d706080148514213e79c7b52584e7d78291c43ca
-
SHA256
d0cb12ac328d52fddad1505165ec469fba2f6506043c69d5036db3209ccd2aea
-
SHA512
540430a68120f4049fb901cf8904d6c7aa02d59a846b6d662c2cad098205b879b9673a35830788414df1efb0860ab142a5085a1b3c2d7b726a4427896561a5d6
-
SSDEEP
12288:Wq4w/ekieZgU618OErRtUB1Zqa27v/eGRlMa:Wq4w/ekieH66IwhRP
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-28_e806fe42f27c211b0dfb428b87d0c0ed_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-28_e806fe42f27c211b0dfb428b87d0c0ed_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3DFA.tmp"C:\Users\Admin\AppData\Local\Temp\3DFA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_e806fe42f27c211b0dfb428b87d0c0ed_mafia.exe A2C527961E2D2FF42A73CDC47414817002F01BA51949A73D8E542F0743824165318170B9FA98198E1305691D238582D81015CC95C5ABA084516EF58F951EA1602⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD592d6ab503bd876f28dfeacb9939dfef4
SHA193b2588d7fa14fadd1b69b4745d6e61a867d5051
SHA256304e7b2b1fae387742a633b56164dc676f1d8cd40d32c0cdc04a89ea67eee137
SHA51276a3f71bdf770e289ee79d3f1f8df203c426d80dea356491e4883f8d8702414b333d6216599b366d15feb29a7882ea011c659b4a3fafef677f7c881d94583b4e