Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/03/2024, 06:32
General
-
Target
2024-03-16_537acc277839012922669473db6bba66_mafia.exe
-
Size
476KB
-
MD5
537acc277839012922669473db6bba66
-
SHA1
2908f80ce308197e7678137b21c745d5c0177148
-
SHA256
a4df27d164d84bd29593c5d60a65eff4cea930a001558fb38f46eacf002178b1
-
SHA512
a89fda6d299fabdba70f477a8a1edd8a08f7e59616966655c6472bbf1c2356a2cc1e501f5a2fd6c866a1ab723e2f92b14ef7909981a53bdc67ee7113747989e5
-
SSDEEP
12288:aO4rfItL8HRoMLvv5vNgdzvJowP7K9wlsDpVFd:aO4rQtGR9LvvnsP+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-16_537acc277839012922669473db6bba66_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-16_537acc277839012922669473db6bba66_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5B1B.tmp"C:\Users\Admin\AppData\Local\Temp\5B1B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-16_537acc277839012922669473db6bba66_mafia.exe CC56AB08E0F02B30E121407107C8AEB5F9CCE0850092A6CF9EE3B5D8229664AD6E511BC57285F948047CDA24F2ABEBA3AE111D14F612596F793BB514F5BB6BA92⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD5f7e30916b51bf5fabccb376c5210f659
SHA13935f9481a0e6cf2fd55481e365b22a0721aa95d
SHA256ebd9433995f9fadd7c5d7764e6b3af8ad816d8d0a50b75e5146f6b0ab1fa5045
SHA5127b5fd1c14f08fef044cdea7276a0d35ae418f2221fc4f3bf43a2912580884086206c7a7f69f50bf7619262f3b559195397830804c8931d8f1089326388cc5fec