Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-25_c8285d2c574a7e9dbc52b7bb919a9322_mafia
-
Size
467KB
-
Sample
240325-sz77qaef9t
-
MD5
c8285d2c574a7e9dbc52b7bb919a9322
-
SHA1
e6a1ab79bbb51ad62bd3c00af2ef75527998bb48
-
SHA256
f05af24e07bac1a7e46a2c14006486852550e9a2a3157228b36313c642a48686
-
SHA512
847226960ad1683502ff45392484d46dfd17105d74d4f25df9c880b5ad8c49806d6ed2db7a43c9ea5e4e649ea37dc52f7a5c2f1bddb2bdcbc9cebce7038d279f
-
SSDEEP
12288:Bb4bZudi79LHTVZb9CtV49AznV/CYWuqAk:Bb4bcdkLHTVZbiq9AzFCYWuY
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_c8285d2c574a7e9dbc52b7bb919a9322_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-25_c8285d2c574a7e9dbc52b7bb919a9322_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_c8285d2c574a7e9dbc52b7bb919a9322_mafia
-
Size
467KB
-
MD5
c8285d2c574a7e9dbc52b7bb919a9322
-
SHA1
e6a1ab79bbb51ad62bd3c00af2ef75527998bb48
-
SHA256
f05af24e07bac1a7e46a2c14006486852550e9a2a3157228b36313c642a48686
-
SHA512
847226960ad1683502ff45392484d46dfd17105d74d4f25df9c880b5ad8c49806d6ed2db7a43c9ea5e4e649ea37dc52f7a5c2f1bddb2bdcbc9cebce7038d279f
-
SSDEEP
12288:Bb4bZudi79LHTVZb9CtV49AznV/CYWuqAk:Bb4bcdkLHTVZbiq9AzFCYWuY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-