Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-22_f5370bc11aba8077fc561304cb87d83e_mafia
-
Size
467KB
-
Sample
240422-wr1z8aed51
-
MD5
f5370bc11aba8077fc561304cb87d83e
-
SHA1
7636505162443414d4f2548ee3972987e5a1c581
-
SHA256
a36b659c0ad66a6e5288c000ed96f5183d6e1e022ea8bd8b3dd5c5b3745b1b47
-
SHA512
a18bf6ac022e8c10c0edf2ef3e3575a602fa7be23f2ec4bc3a45b6eec7a4a2e2e4e60022d1be2717a7b8053627f70a018b847c0974ea8cf4408a5497af206474
-
SSDEEP
12288:Bb4bZudi79LrrKiznZtOxUWXkpEyTTeuawXftEHAk:Bb4bcdkLr9zrOVXRyveubW
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_f5370bc11aba8077fc561304cb87d83e_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_f5370bc11aba8077fc561304cb87d83e_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_f5370bc11aba8077fc561304cb87d83e_mafia
-
Size
467KB
-
MD5
f5370bc11aba8077fc561304cb87d83e
-
SHA1
7636505162443414d4f2548ee3972987e5a1c581
-
SHA256
a36b659c0ad66a6e5288c000ed96f5183d6e1e022ea8bd8b3dd5c5b3745b1b47
-
SHA512
a18bf6ac022e8c10c0edf2ef3e3575a602fa7be23f2ec4bc3a45b6eec7a4a2e2e4e60022d1be2717a7b8053627f70a018b847c0974ea8cf4408a5497af206474
-
SSDEEP
12288:Bb4bZudi79LrrKiznZtOxUWXkpEyTTeuawXftEHAk:Bb4bcdkLr9zrOVXRyveubW
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-