Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-18...ia.exe

windows7-x64

7

2024-03-18...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 12:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-18_a4de8b495f46d745ce6517a4e1946510_mafia.exe

  • Size

    468KB

  • MD5

    a4de8b495f46d745ce6517a4e1946510

  • SHA1

    68403dbe7ffa87ee70bf87e0699d49c724b86cb1

  • SHA256

    a892c52c0cbb353b91a206dba02cdc575981156c85143e9e3029a623c3581104

  • SHA512

    eb874e300cde2673bd591d1faba86255221c67a0c2d035cf618b6d4ea0b19bf2ccab417f716ec767447a1c0613d5ec7e864a985f6d7c8a9126f82201d6e304ec

  • SSDEEP

    12288:qO4rfItL8HGPS+/5XvXkMica2Xlb4i7bWmeEVGL:qO4rQtGGPLkMicpBumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-18_a4de8b495f46d745ce6517a4e1946510_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-18_a4de8b495f46d745ce6517a4e1946510_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Users\Admin\AppData\Local\Temp\1890.tmp
      "C:\Users\Admin\AppData\Local\Temp\1890.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-18_a4de8b495f46d745ce6517a4e1946510_mafia.exe E776D191B5F3DE6198B1FE076F514B7133A37DC058F7EA833ADF860BCDB230DE729D24EF6C2A3D5B430C94DDA8904C78AAFBC6CFD2F9BAEF5412D7B47904C152
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\1890.tmp
    Filesize

    468KB

    MD5

    c8aee3ce240ec3a3b4cfd46bb6205cd2

    SHA1

    2771f8f9ed9df12ca3f9e594a4ec768fab58b632

    SHA256

    26a433952b727bd9349c8756374d9764b78eb57721f82e830debe05e1c71fae7

    SHA512

    092b89b02b229b46ab2ca91e34bc3dab68d40e5a126390b1f0acfb47d2ca9224d2dd237144d1b207fd4b088262cefcda2e2c0160aad1bc24376a94395a41753c

    Download Submit