Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-26...ia.exe

windows7-x64

7

2024-03-26...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 22:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-26_8a068197040d28d849eec169851dd08d_mafia.exe

  • Size

    476KB

  • MD5

    8a068197040d28d849eec169851dd08d

  • SHA1

    d93169b75d32070ce0e9dfaab1055239506b7f70

  • SHA256

    ae135e7ae0084db0f416cc94d152c124d1d6c7618d02883199414851cafbf137

  • SHA512

    96523268b91a39e69ed2bca9e93cd87beb2d1a88e3ff8f45dba1776ef726cb57c97723e0067793e52c23d77c1077dea51394266a448d4fc9393301419771e9ea

  • SSDEEP

    12288:aO4rfItL8HRPdgI+W1yWsL0YOHraFHy6tj1FmYFM7K9wlsDpVFd:aO4rQtGRt+W9sQra1FmYM+9wlsDpVFd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-26_8a068197040d28d849eec169851dd08d_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-26_8a068197040d28d849eec169851dd08d_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1008
    • C:\Users\Admin\AppData\Local\Temp\7899.tmp
      "C:\Users\Admin\AppData\Local\Temp\7899.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_8a068197040d28d849eec169851dd08d_mafia.exe EC61DA681DAED2140984754BAD5CBBBD2D3059CBDBAE5361EF7A7048BDCE7C19EF75C9D7FB02978EAA8A4B4CE6DF545CE383EAC426C7F0A4CAE41F3021E1CDCF
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\7899.tmp
    Filesize

    476KB

    MD5

    61d13ab51a8bf750bbe0bdb247304738

    SHA1

    6f6d05da54f7489d4627e727923a5cbafb476a3f

    SHA256

    38a49980bd18d1e5a74172b4f549a4470d30c64be34e499fff213b2d0fa47ffc

    SHA512

    b2bba2da0adb3a60147be96b0ba0daed282d9333ac00a8120eb57bca33e03de0134e044316b7dc70bd662919f9176cc257a6bb9ef253728bf9a82480b170a0df

    Download Submit