Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-08...ia.exe

windows7-x64

7

2024-03-08...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 16:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe

  • Size

    468KB

  • MD5

    f19f957fbf2f5f47b99170dd6fede579

  • SHA1

    44df329881821b782263288c39f336a9e7887e2d

  • SHA256

    58ddb0f309d48f27fce5f8b5c55cc67c19cad2c3b9b0ae58c88e746ece422d5f

  • SHA512

    761fada1f1e4bb28b4237e9fca6927125c01e76066afe364d469a446ac1ddb0e21499703ed3685b788fce62653f1e92b64318d7049de1416f7ed6c74c0ab07b9

  • SSDEEP

    12288:qO4rfItL8HGzMMFh/E77GNeFUxo+6hfuVpsXJ7bWmeEVGL:qO4rQtGGY77aNNo+WM8umeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Users\Admin\AppData\Local\Temp\848B.tmp
      "C:\Users\Admin\AppData\Local\Temp\848B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe B91B21C776381565D69BEB7F4BAF0FE05DED73555628A96788256FE0C93F438C5F30551CA8B85B388F76F7E9C49E046374C48DA7E263F241558655604EC401DE
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\848B.tmp
    Filesize

    468KB

    MD5

    50af2e38e37ee160a542f02b38ab7eef

    SHA1

    48013ac225e96faaf981160952e40b7c826eabff

    SHA256

    351b71055de08a60cfae9b76a82315cc522bb65df43815dd12494700463107d4

    SHA512

    06055e2707215a715ea97941e4a58d114b9b4e8c5eca749d37510ca5fb58c467a692fc715c11a0869b035ab52445ef806fab79bfd0cb6823039cf082d4f18e34

    Download Submit