Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-05_28f3b2b1d0bf2746d2d9e747547d32b3_mafia
-
Size
465KB
-
Sample
240405-tyf8aagg7v
-
MD5
28f3b2b1d0bf2746d2d9e747547d32b3
-
SHA1
aaa7c59532c450b2095452c5c03590a594180561
-
SHA256
2cc7f9f4c45bf0677ff07c444e64cb334341b55fba561160f09829abcfdaa0b3
-
SHA512
a66e50bf6fec7c211fc51fa5455d30338a802753cfbcf9870ada907d534603f84e16d66694c4a0213c3c914fed441feb03d1c1490c44fa218bd12183bbd96f50
-
SSDEEP
12288:Bb4bZudi79Lt094CSmNC77NdAUyS+dNyMCCdvqA:Bb4bcdkLth5X7nGldv
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_28f3b2b1d0bf2746d2d9e747547d32b3_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_28f3b2b1d0bf2746d2d9e747547d32b3_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_28f3b2b1d0bf2746d2d9e747547d32b3_mafia
-
Size
465KB
-
MD5
28f3b2b1d0bf2746d2d9e747547d32b3
-
SHA1
aaa7c59532c450b2095452c5c03590a594180561
-
SHA256
2cc7f9f4c45bf0677ff07c444e64cb334341b55fba561160f09829abcfdaa0b3
-
SHA512
a66e50bf6fec7c211fc51fa5455d30338a802753cfbcf9870ada907d534603f84e16d66694c4a0213c3c914fed441feb03d1c1490c44fa218bd12183bbd96f50
-
SSDEEP
12288:Bb4bZudi79Lt094CSmNC77NdAUyS+dNyMCCdvqA:Bb4bcdkLth5X7nGldv
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-