Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-26...ia.exe

windows7-x64

7

2024-03-26...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 04:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-26_d76218a7c1d30df2c41a8fe03401c90c_mafia.exe

  • Size

    476KB

  • MD5

    d76218a7c1d30df2c41a8fe03401c90c

  • SHA1

    6ea1637c335861b4a78837def857d1c4081f7d58

  • SHA256

    e14b2cf239fb8269bbc42c103df5fa3b2f3ef031f652484653ca60d6cffdd695

  • SHA512

    c3e150427bb03115a937e1916294ee3f350a7f26ee7286987c4f71cbd0f5349f8ad6ef9e745f25136c8339fb04306ebb1ab83f8964b76ce8c77b6cfa5b17cb25

  • SSDEEP

    12288:aO4rfItL8HRyNft1KWKs6J9f6bu0vS27K9wlsDpVFd:aO4rQtGRyhtUYa9Sbu2S2+9wlsDpVFd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-26_d76218a7c1d30df2c41a8fe03401c90c_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-26_d76218a7c1d30df2c41a8fe03401c90c_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Users\Admin\AppData\Local\Temp\5496.tmp
      "C:\Users\Admin\AppData\Local\Temp\5496.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_d76218a7c1d30df2c41a8fe03401c90c_mafia.exe 10893F2849A6EFA2D12A06CB685A52D778F74ADA32951E0CD365380B707F52198C12C0E20F76EA551A28835CF5D8A0F7573E728D146612DDDF67A9B96136326A
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\5496.tmp
    Filesize

    476KB

    MD5

    743d4f5f6c60d772d8b1e694e914e3f8

    SHA1

    927def0a79a616cc55164b70dde4f3c6845e578a

    SHA256

    5d9446f66f73aed070b9bb3cc4c68517c48908aa667bde2c96982a00fef5f02f

    SHA512

    c7571bc8de34886c01af1f09d293ec9d93ca10019ae2f9d575d2418cafe706fcccdad63db12b1401edeee77cc99793891aaf19f1317521c8b471bcfa8eb45f7e

    Download Submit