Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-10...ia.exe

windows7-x64

7

2024-03-10...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 06:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe

  • Size

    486KB

  • MD5

    dea2f56adc7ab69b3fa087e53076a618

  • SHA1

    e28b380d3b1c90f0a3562f349ffc2c0854a607f1

  • SHA256

    8c375bc8912645199fc2ef1fd6c43770a193fd548219be92a27addf45459291c

  • SHA512

    be83099eba614bb8db54b47318f2a363c8565c3ae48ebf3a83473797b3abfa9e72d3d7fa9375e027cf310b6e0b54ad6894cd70910ec96a3495bd6152dcbf8cdb

  • SSDEEP

    12288:3O4rfItL8HP27LX1Ghwx7Rzz26PQ7rKxUYXhW:3O4rQtGP2qwNdS3KxUYXhW

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Users\Admin\AppData\Local\Temp\12A6.tmp
      "C:\Users\Admin\AppData\Local\Temp\12A6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe 25C67BE99AE3703A5E676BF644D23614AAC3C785690E239DB19F0E3FEBFF4C83608C3E4C601A873A42E4F56FF8C8ECA8F7E0008AF06B7CA6370F8295F1EAC06D
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\12A6.tmp
    Filesize

    486KB

    MD5

    99f11685b24b02ad0f030eeba08d1719

    SHA1

    b8aa1d5ac582cff34d5f3134c2f8099a2d86e8c7

    SHA256

    12ae24ccec4aaeec0271f806356c7aff7815c097d63ab58f03da0c4181df23d4

    SHA512

    7f88a92277bbd984dedfba4fc52e12d67c128df4b08848d7b4197bdf1711e9002204ff77488872b1d6952407d501907045af43f5e011227780a0ff723474d77e

    Download Submit