Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-23...ia.exe

windows7-x64

7

2024-04-23...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23/04/2024, 07:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe

  • Size

    384KB

  • MD5

    eafcea5a0efef5838685335741c66c44

  • SHA1

    83cd81e009cb2a3f7f5e331918bb9101406de870

  • SHA256

    3c9fbf31e37dfdd4772c029410ff4935b7c121c177aa025505694c4dab7df85d

  • SHA512

    8bb932324c8150fd665e184a5a65b0d817ee7110aca54b3c2a5666e10d070c0cda959bfb25dca8c340333ea2d1b299466dec3506ee841c46ca7c16b5bb3ead3a

  • SSDEEP

    6144:drxfv4co9ZL3GBGgjODxbf7hHAvrZeSu85y1RxDEIW1bvIMBtbw6Z:Zm48gODxbz65wA1bAU3Z

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1276
    • C:\Users\Admin\AppData\Local\Temp\D1B.tmp
      "C:\Users\Admin\AppData\Local\Temp\D1B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe FECC7EA5BD6678289D741274D81A766F9E488B43D328A2426424740D62B2F13E8758D600D7C617F4A644779CB0A7B6DED2C3151275DB50ABEB1D7B5C7733EB9E
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\D1B.tmp
    Filesize

    384KB

    MD5

    79e39219d6700accd30c992f5d828579

    SHA1

    eb8651c1a00f02f6ed3a9e91e04b8969e4efd4ab

    SHA256

    c00355786a5b6c777be767d6a8e498a609ba306b5cbbc0644bd3e4e32c93fbec

    SHA512

    baffef7f366c67f8379e2d9e52adf05d7f927d2508db0d5260bbf81cbe5caf49a4105a0a110d62dd9b35faf977745c3b75be89c1840949619399f7758122ff66

    Download Submit