Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-28...ia.exe

windows7-x64

7

2024-02-28...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 11:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-28_d1d7ded47235a96f0e29969ba3b4d4bd_mafia.exe

  • Size

    476KB

  • MD5

    d1d7ded47235a96f0e29969ba3b4d4bd

  • SHA1

    6858f0b77a89f8eab4cb78f3b3ecd3c38206872b

  • SHA256

    14df440689a9585151fd394cb57e949d9ddae9d6b295c906597fb33680b19685

  • SHA512

    951f8c62d47527d0468b482a7645eb9f282e12da3aa8ba4844f237268be9287e6603f18d8274b6877489ec972e03669b76d7e805a4444ce5bea33362e7b4b1b9

  • SSDEEP

    12288:aO4rfItL8HRjI3XqaoRsjk8MIM2Bg7K9wlsDpVFd:aO4rQtGRuXqaoRt8Oj+9wlsDpVFd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-28_d1d7ded47235a96f0e29969ba3b4d4bd_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-28_d1d7ded47235a96f0e29969ba3b4d4bd_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Users\Admin\AppData\Local\Temp\46FF.tmp
      "C:\Users\Admin\AppData\Local\Temp\46FF.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_d1d7ded47235a96f0e29969ba3b4d4bd_mafia.exe FBE8C75D1B923731E0FD8B400979EC2EDB8A469CEBE7193D1291B24EF224E46D628D525AE9451965CAFCA3B566AA771CD2DA9A303B97CF9320BB3A52B70D6204
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\46FF.tmp
    Filesize

    476KB

    MD5

    1b6367c6026c7a7848706b8c38971ddc

    SHA1

    e762afc4adc79ffeb283deac5e5b624a6d581745

    SHA256

    c6198fb7bee153165a01cb0ffbea4c1a19c2b0b6ee6ab6cf5543a176e447c665

    SHA512

    15e0e2d470716e775bf8bfe345e39c7acdfea9ba029b367c9852174c9184ac4046fabec540190857dd7ce05f51b5dc8bfaa633cdbee158c8e0596e87fc31c9fc

    Download Submit