Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia
-
Size
2.5MB
-
Sample
240416-pk96zsac28
-
MD5
33a88fe3746970936e8dc457df66151d
-
SHA1
849521ff645519fbe16ddc1b77b047c25628154f
-
SHA256
13207b959f53ce330ebbd318768fcf96fb65b1562acfd798dc4e5a075e450808
-
SHA512
40546aaf02bb14d9cc0e0268732e9d6e4e002376ec656ae4e55cc00c783699adc1d7079b88be8708be7924767d29e51c96ba0e35af4d6701cdd087116cfebfab
-
SSDEEP
49152:cuIIKSofs2hPd2l177BTK2VbDsar1YDji:cjvfs2hPIl1/h
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia
-
Size
2.5MB
-
MD5
33a88fe3746970936e8dc457df66151d
-
SHA1
849521ff645519fbe16ddc1b77b047c25628154f
-
SHA256
13207b959f53ce330ebbd318768fcf96fb65b1562acfd798dc4e5a075e450808
-
SHA512
40546aaf02bb14d9cc0e0268732e9d6e4e002376ec656ae4e55cc00c783699adc1d7079b88be8708be7924767d29e51c96ba0e35af4d6701cdd087116cfebfab
-
SSDEEP
49152:cuIIKSofs2hPd2l177BTK2VbDsar1YDji:cjvfs2hPIl1/h
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-