Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-23_0b92147c7be4916b81686d6ef5aaf5cf_mafia
-
Size
486KB
-
Sample
240423-bshj2sah7s
-
MD5
0b92147c7be4916b81686d6ef5aaf5cf
-
SHA1
2c45fb724dbf81adfab2acbf38dd06b00a4e2cf7
-
SHA256
a0a31e57410db248b7744018087045b3bcc86aee82f6db32d9322d0d753d49b1
-
SHA512
31dc791aac4e4cb8de61d423cb023d0d5f8fc22cfaad93dfae65fcda5812d6cd72606e16cdd5df9288baf0908bd9e28320e46a5bdd65a45991520e69ec1303f7
-
SSDEEP
6144:pRPu8zwvAZsCZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2fB:pTrIik35BE+R8YnpiuvroVUB
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_0b92147c7be4916b81686d6ef5aaf5cf_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-23_0b92147c7be4916b81686d6ef5aaf5cf_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_0b92147c7be4916b81686d6ef5aaf5cf_mafia
-
Size
486KB
-
MD5
0b92147c7be4916b81686d6ef5aaf5cf
-
SHA1
2c45fb724dbf81adfab2acbf38dd06b00a4e2cf7
-
SHA256
a0a31e57410db248b7744018087045b3bcc86aee82f6db32d9322d0d753d49b1
-
SHA512
31dc791aac4e4cb8de61d423cb023d0d5f8fc22cfaad93dfae65fcda5812d6cd72606e16cdd5df9288baf0908bd9e28320e46a5bdd65a45991520e69ec1303f7
-
SSDEEP
6144:pRPu8zwvAZsCZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2fB:pTrIik35BE+R8YnpiuvroVUB
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-