Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-10_4e0f28d80d261ab705043ed9330567fb_mafia
-
Size
467KB
-
Sample
240410-t8ga2aeb65
-
MD5
4e0f28d80d261ab705043ed9330567fb
-
SHA1
2c6b87cfc680e9f642f3322cc03a1616f2625cd6
-
SHA256
4b940a76c3e179877a5147a424e3a57590660ee62a1135208e86215ffc62cf01
-
SHA512
fb10a7ec128c1a20bc7fdfbf9fb981b52b48a690d7dfc5ef185c6dac96476bf6e52674aaf37be082cb574d31b3b6b13217211623ee52a380e96e76e8c19bc9c2
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStWE1gS1k1dqqqjFK1qg+swU8j7BM/fFtUeAk:Bb4bZudi79Lg1udjxfZC7ydAk
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_4e0f28d80d261ab705043ed9330567fb_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-10_4e0f28d80d261ab705043ed9330567fb_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_4e0f28d80d261ab705043ed9330567fb_mafia
-
Size
467KB
-
MD5
4e0f28d80d261ab705043ed9330567fb
-
SHA1
2c6b87cfc680e9f642f3322cc03a1616f2625cd6
-
SHA256
4b940a76c3e179877a5147a424e3a57590660ee62a1135208e86215ffc62cf01
-
SHA512
fb10a7ec128c1a20bc7fdfbf9fb981b52b48a690d7dfc5ef185c6dac96476bf6e52674aaf37be082cb574d31b3b6b13217211623ee52a380e96e76e8c19bc9c2
-
SSDEEP
6144:jFrJxvldL4c5ONK1xgWbd1s79+iStWE1gS1k1dqqqjFK1qg+swU8j7BM/fFtUeAk:Bb4bZudi79Lg1udjxfZC7ydAk
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-