Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-26_cea015d550a294698024f588613ab14c_mafia
-
Size
486KB
-
Sample
240426-nbqkjsfb4z
-
MD5
cea015d550a294698024f588613ab14c
-
SHA1
16b8ba054d64fa2202836af32031b7fd1959613f
-
SHA256
795eef6dee8c60b48ccf89081f5cf9f48b54330e74a900cb81bcd9ee9648b539
-
SHA512
3ca7d6e8c4cbfae35a0d6f23fb1ab310e26b110484038ab0973c8a5bd237723a23128b47c95a401b76ffa933e5eb31ef39cfb90889662271504f33d039b8943d
-
SSDEEP
6144:pRPu8zwNAcYCZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2fw:pUrIik35BE+R8YnpiuvroVUw
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_cea015d550a294698024f588613ab14c_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-26_cea015d550a294698024f588613ab14c_mafia.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_cea015d550a294698024f588613ab14c_mafia
-
Size
486KB
-
MD5
cea015d550a294698024f588613ab14c
-
SHA1
16b8ba054d64fa2202836af32031b7fd1959613f
-
SHA256
795eef6dee8c60b48ccf89081f5cf9f48b54330e74a900cb81bcd9ee9648b539
-
SHA512
3ca7d6e8c4cbfae35a0d6f23fb1ab310e26b110484038ab0973c8a5bd237723a23128b47c95a401b76ffa933e5eb31ef39cfb90889662271504f33d039b8943d
-
SSDEEP
6144:pRPu8zwNAcYCZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2fw:pUrIik35BE+R8YnpiuvroVUw
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-