Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-24...ia.exe

windows7-x64

7

2024-04-24...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/04/2024, 00:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-24_f86768d03d3745d535709ee4a41bc61c_mafia.exe

  • Size

    476KB

  • MD5

    f86768d03d3745d535709ee4a41bc61c

  • SHA1

    e49f8d440e6b228af383f29de1823b5ba863101c

  • SHA256

    f35fc17e972cfcf1c8ac25949a4d7aa7425f1dc3a49268bfa073bff6bd9a6eb4

  • SHA512

    84d836295ed7e776fea3d10e591d4666a5f15f91904e5d77fdffc2bcf858b70031a66fc03e36e5c63ed4e1ab15d129e70be8014a58790d0b69f87c42a7fdf108

  • SSDEEP

    12288:aO4rfItL8HR0jAV42yLi+VeVsvVhuZdAeRz7K9wlsDpVFd:aO4rQtGR942WeVsvV+z+9wlsDpVFd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-24_f86768d03d3745d535709ee4a41bc61c_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-24_f86768d03d3745d535709ee4a41bc61c_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Users\Admin\AppData\Local\Temp\11DC.tmp
      "C:\Users\Admin\AppData\Local\Temp\11DC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-24_f86768d03d3745d535709ee4a41bc61c_mafia.exe 191FA9C1AC4DA57FF3C5E2BD5D9F33BA015F5F26EE284F0C2D46832EB81E2691727E24CB7AD52D0C40C1DC632E5273F63AF9201FD19CCEE32C6D2A339BE50794
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\11DC.tmp
    Filesize

    476KB

    MD5

    7ac7e91377258fbcf2060933ec10cffd

    SHA1

    6c91f3d670070e51d8f937a409cf49f94e41f8eb

    SHA256

    c2ec4756631435bc94fc0c05cbf983c363d526f5dc41855e2b260a7335ea2f69

    SHA512

    01c04626cc728d3f84fd465d3eca0692a5bc3e0eb1cd85bda6fa042e7658b01706ab88af321c9bcebd328eebbb9e2131d45901df0377ddd4d1748fbdc57a62b7

    Download Submit