Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-06...ia.exe

windows7-x64

7

2024-04-06...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 06:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe

  • Size

    486KB

  • MD5

    f8991cdf3f763bf20f9f21a7847b0fd3

  • SHA1

    466fd9a542ad4e63f1f7831045d80cd0f077ecfa

  • SHA256

    09d086882a2e15996aaa9398402cc8d0cd1b02cd902508ee569bb5685911cb23

  • SHA512

    bc47fdbce89fac2f74acbeb60b146b5ec4eef4168b53137e2b6fa2ce376b9e883c86d532e31caecd7ac808f989a27de58987b01475f8a6b129d40bd172f082e7

  • SSDEEP

    12288:3O4rfItL8HPl19pk8GE/HQutjM+TTZd7dfdfcN7rKxUYXhW:3O4rQtGPPPk8Iz+pd7diN3KxUYXhW

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Users\Admin\AppData\Local\Temp\8804.tmp
      "C:\Users\Admin\AppData\Local\Temp\8804.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe AE6A588E228E3993033FCE55A75F68B8433653F93A4C6EB892828E2D9169A34397691EAE2589A72642AA8FDC6B383AF23223A45D9593185BC797D8FAF82746CF
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\8804.tmp
    Filesize

    486KB

    MD5

    ff6981baea51700367996ae8cb2ed1d5

    SHA1

    5b2c6543d6578018bb8c580565967e72f867b920

    SHA256

    ff11de3e8f2597d66e5b0dc3ed1fb49c15e53e65d1b8cc219875a0488a5c1d69

    SHA512

    8427a8d56c33826be7e1ab9b7ca129df172e1d9b01cd61e4e28d8276a57934a8174d5a89bb85ffbc0adac37ba26314478959c7222a2085ef6c8bb91b032453fb

    Download Submit