Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-19_e442e3a5c68c592fa75e55ecd3aea323_mafia
-
Size
462KB
-
Sample
240319-py8v3scd25
-
MD5
e442e3a5c68c592fa75e55ecd3aea323
-
SHA1
23d7c48cd7b03c98ca9d8579fa75bd928e938857
-
SHA256
ec54fcdec9c0feb77d30145939653675986eadd9eded8f547f49b3641b6bdd51
-
SHA512
4b645dbdda75ba2fcf05a5a153e206f42c12568976f9cc3c3d8f65aa30529e2d3c1cb6affffe1f3bdbe3c178eb775423595e1fb52e47a9a4fa35781b7bbb4c67
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHQoO2V+aOOrYYSS79nmKIomaBjC9FIscds8QmsH5f:zJrIik3moO5apYYSSEnnJVX9
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_e442e3a5c68c592fa75e55ecd3aea323_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_e442e3a5c68c592fa75e55ecd3aea323_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_e442e3a5c68c592fa75e55ecd3aea323_mafia
-
Size
462KB
-
MD5
e442e3a5c68c592fa75e55ecd3aea323
-
SHA1
23d7c48cd7b03c98ca9d8579fa75bd928e938857
-
SHA256
ec54fcdec9c0feb77d30145939653675986eadd9eded8f547f49b3641b6bdd51
-
SHA512
4b645dbdda75ba2fcf05a5a153e206f42c12568976f9cc3c3d8f65aa30529e2d3c1cb6affffe1f3bdbe3c178eb775423595e1fb52e47a9a4fa35781b7bbb4c67
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHQoO2V+aOOrYYSS79nmKIomaBjC9FIscds8QmsH5f:zJrIik3moO5apYYSSEnnJVX9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-