Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-19_91bd89dfd550df42964f795980078d2f_mafia
-
Size
465KB
-
Sample
240319-nxgvjabc54
-
MD5
91bd89dfd550df42964f795980078d2f
-
SHA1
a22f7afdd50785018403d34e514adb9c20f000f5
-
SHA256
ac88cd7b08916e1e6975758ca847c60713035089998c1846f150b9ee9d8ee46e
-
SHA512
8f7c553d2405cdb0de0ba38c2f61068aa797b065991167b4cbfa2a72d2b7af6ee7e9a3847b8bc0248c66c866fa7a3d506fffe10bd56ebce958f8c4624db4de91
-
SSDEEP
12288:Bb4bZudi79LcautI451ldPl7YE0ePv59xAA:Bb4bcdkLcJeKnOneXnx
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_91bd89dfd550df42964f795980078d2f_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_91bd89dfd550df42964f795980078d2f_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_91bd89dfd550df42964f795980078d2f_mafia
-
Size
465KB
-
MD5
91bd89dfd550df42964f795980078d2f
-
SHA1
a22f7afdd50785018403d34e514adb9c20f000f5
-
SHA256
ac88cd7b08916e1e6975758ca847c60713035089998c1846f150b9ee9d8ee46e
-
SHA512
8f7c553d2405cdb0de0ba38c2f61068aa797b065991167b4cbfa2a72d2b7af6ee7e9a3847b8bc0248c66c866fa7a3d506fffe10bd56ebce958f8c4624db4de91
-
SSDEEP
12288:Bb4bZudi79LcautI451ldPl7YE0ePv59xAA:Bb4bcdkLcJeKnOneXnx
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-