Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-09_58f5a13b4aa5c8f842f3251a5e38dd17_mafia
-
Size
834KB
-
Sample
240309-mfdwwaeh44
-
MD5
58f5a13b4aa5c8f842f3251a5e38dd17
-
SHA1
b32df71c9ea192b0b01746006d19c4fff978d898
-
SHA256
0405c1498334674079e48358702da47bd387f9a8ea29a04ef4d91fd6cd36f85d
-
SHA512
0519ea8887bbaa97d5dbcd9c05bdcc006459b3b757c98053ec1e102e41e75b87bfe24f9f9b2e0a186dee417812a838cea3373b7ed40862b672cd808c9305eb93
-
SSDEEP
24576:wmWZuw4sX2LM2y1yxXlmf7ICkBUKd47iJ:wm2wPLYWXAjIxd47
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_58f5a13b4aa5c8f842f3251a5e38dd17_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_58f5a13b4aa5c8f842f3251a5e38dd17_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_58f5a13b4aa5c8f842f3251a5e38dd17_mafia
-
Size
834KB
-
MD5
58f5a13b4aa5c8f842f3251a5e38dd17
-
SHA1
b32df71c9ea192b0b01746006d19c4fff978d898
-
SHA256
0405c1498334674079e48358702da47bd387f9a8ea29a04ef4d91fd6cd36f85d
-
SHA512
0519ea8887bbaa97d5dbcd9c05bdcc006459b3b757c98053ec1e102e41e75b87bfe24f9f9b2e0a186dee417812a838cea3373b7ed40862b672cd808c9305eb93
-
SSDEEP
24576:wmWZuw4sX2LM2y1yxXlmf7ICkBUKd47iJ:wm2wPLYWXAjIxd47
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Adds Run key to start application
-