Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-26_880524e15cf0fa1f4a87b55d7dda6b96_mafia
-
Size
486KB
-
Sample
240426-pq3zvscd8w
-
MD5
880524e15cf0fa1f4a87b55d7dda6b96
-
SHA1
47cd6d5778f0f631606fe0d1a8fd3b0af65eb7ab
-
SHA256
09089219b55c8ca1fa3f3a11423867660225f22640b4d20b987185b2fb876e28
-
SHA512
11180c362954913594a5d40c89668ddfd306034b12f478d7e28485f842a75924322edb4f7b8dad8b043874457aa34436b02717eaf9c275029fec5d40d1832eb3
-
SSDEEP
6144:pRPuZzNIAZYMZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2f9:pwrIik35BE+R8YnpiuvroVU9
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_880524e15cf0fa1f4a87b55d7dda6b96_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-26_880524e15cf0fa1f4a87b55d7dda6b96_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-26_880524e15cf0fa1f4a87b55d7dda6b96_mafia
-
Size
486KB
-
MD5
880524e15cf0fa1f4a87b55d7dda6b96
-
SHA1
47cd6d5778f0f631606fe0d1a8fd3b0af65eb7ab
-
SHA256
09089219b55c8ca1fa3f3a11423867660225f22640b4d20b987185b2fb876e28
-
SHA512
11180c362954913594a5d40c89668ddfd306034b12f478d7e28485f842a75924322edb4f7b8dad8b043874457aa34436b02717eaf9c275029fec5d40d1832eb3
-
SSDEEP
6144:pRPuZzNIAZYMZrIik3tHDvBE+2qgrYhpT00ZiKNvHyyRZiaafI9sH2f9:pwrIik35BE+R8YnpiuvroVU9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-