Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-04-27...er.exe

windows7-x64

10

2024-04-27...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_ccf360333347154c6737fb53fd54bd84_mafia_magniber

  • Size

    6.1MB

  • Sample

    240427-3l56babd5s

  • MD5

    ccf360333347154c6737fb53fd54bd84

  • SHA1

    0b254898512692df4688d30799c6513a167575d6

  • SHA256

    d73c1ae99e5af96b4e8ae31bd815d25999587690a73d3de08cbf77b7d74085f9

  • SHA512

    7c1b5a5eb2fdcc368669db0114723cd6d4765a2192944bba672e160c51a6678e51b78d8fa94e6edcca375e5caaf979a3e282db77893a77405e1548c1ac12d0b0

  • SSDEEP

    98304:A8Gumr0fMPDDeQ0HSzRmz1bOL+PnXcwlR4G765oSQC0nfYDFLOAkGkzdnEVomFHo:A8GQUPDuPnsw/4zVQXoFLOyomFHKnP

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-04-27_ccf360333347154c6737fb53fd54bd84_mafia_magniber

    • Size

      6.1MB

    • MD5

      ccf360333347154c6737fb53fd54bd84

    • SHA1

      0b254898512692df4688d30799c6513a167575d6

    • SHA256

      d73c1ae99e5af96b4e8ae31bd815d25999587690a73d3de08cbf77b7d74085f9

    • SHA512

      7c1b5a5eb2fdcc368669db0114723cd6d4765a2192944bba672e160c51a6678e51b78d8fa94e6edcca375e5caaf979a3e282db77893a77405e1548c1ac12d0b0

    • SSDEEP

      98304:A8Gumr0fMPDDeQ0HSzRmz1bOL+PnXcwlR4G765oSQC0nfYDFLOAkGkzdnEVomFHo:A8GQUPDuPnsw/4zVQXoFLOyomFHKnP

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks