Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-14_5931e1ecebc9f9dd7b5134f870814506_mafia_stonedrill

  • Size

    395KB

  • Sample

    240314-je699adh6w

  • MD5

    5931e1ecebc9f9dd7b5134f870814506

  • SHA1

    33b39356f906f7f7340e21d280c918bb3383057f

  • SHA256

    51d7a3bb0dd46fbb55f2ad4aca07e573b53a588bfc41ca7620cf57e5730939cf

  • SHA512

    6d011b97300d21acf0bcce247dcc23bcc73cfc1f9a47e69621b75b3bbb962faa46ecedde4058d9acaab6bc2a937f90a2e72383747a8d2466c195559114f23f6f

  • SSDEEP

    12288:PqYXje0uF1k64/QSywqP0T8oIN1AHDFhY25fC2WF9sK2d4q:PqYuF1k64/Q9j28okAHDHY25fC2WF9sN

Score
7/10

Malware Config

Targets

    • Target

      2024-03-14_5931e1ecebc9f9dd7b5134f870814506_mafia_stonedrill

    • Size

      395KB

    • MD5

      5931e1ecebc9f9dd7b5134f870814506

    • SHA1

      33b39356f906f7f7340e21d280c918bb3383057f

    • SHA256

      51d7a3bb0dd46fbb55f2ad4aca07e573b53a588bfc41ca7620cf57e5730939cf

    • SHA512

      6d011b97300d21acf0bcce247dcc23bcc73cfc1f9a47e69621b75b3bbb962faa46ecedde4058d9acaab6bc2a937f90a2e72383747a8d2466c195559114f23f6f

    • SSDEEP

      12288:PqYXje0uF1k64/QSywqP0T8oIN1AHDFhY25fC2WF9sK2d4q:PqYuF1k64/Q9j28okAHDHY25fC2WF9sN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks