Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-25_f0e4559ee6b1707f1c11c1aa02cca68e_mafia
-
Size
462KB
-
Sample
240325-qbb39sbe5x
-
MD5
f0e4559ee6b1707f1c11c1aa02cca68e
-
SHA1
a14690a1840eef487b40a7b4deb0daa3646b6def
-
SHA256
2ab69fa4c564c269f0f60100f4d44d8b3fe7056e7d675d18566a46a2a86fe050
-
SHA512
943dc7a738fdfff7e306953f485bb28eadeb5d1547276dac8885c93b578a1f8649c3b24fcfde7ca2ce87f7c3944911d9931f46b115487bac338978e23cc82cf5
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHhL6QYpqn0HcdtGbLn5oNww0THaOgzVFHWsH5f:zJrIik3z6QYpqnycdtYL5IwgOgznHn9
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_f0e4559ee6b1707f1c11c1aa02cca68e_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_f0e4559ee6b1707f1c11c1aa02cca68e_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_f0e4559ee6b1707f1c11c1aa02cca68e_mafia
-
Size
462KB
-
MD5
f0e4559ee6b1707f1c11c1aa02cca68e
-
SHA1
a14690a1840eef487b40a7b4deb0daa3646b6def
-
SHA256
2ab69fa4c564c269f0f60100f4d44d8b3fe7056e7d675d18566a46a2a86fe050
-
SHA512
943dc7a738fdfff7e306953f485bb28eadeb5d1547276dac8885c93b578a1f8649c3b24fcfde7ca2ce87f7c3944911d9931f46b115487bac338978e23cc82cf5
-
SSDEEP
6144:zRPu8zwNAZYCZrIik3tHhL6QYpqn0HcdtGbLn5oNww0THaOgzVFHWsH5f:zJrIik3z6QYpqnycdtYL5IwgOgznHn9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-