Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-03_12b91e1d3cb697c7ec6101241900158d_karagany_mafia
-
Size
16.8MB
-
Sample
240503-qttq2abe24
-
MD5
12b91e1d3cb697c7ec6101241900158d
-
SHA1
32f58f87793d251a6e6fd7cbc51fbcbb5f46ccc3
-
SHA256
d1fdb463eb3414317502d6a2934ba7999065cfb3fd216cff68ec4626a2b766fb
-
SHA512
de33d04fced5929e4d96865a2122b284fc145c6b39348c8135380c405b233c623f6f28a6100b2a10365cf992c47f33d764e71e4dc58144091dedf27e4f992867
-
SSDEEP
393216:rTuvmPY7EyCjPzwSA4tgAr3KBePYeEQtxK4qLcYE:PuvmPY7EyC7kSAf6YelKxoh
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_12b91e1d3cb697c7ec6101241900158d_karagany_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-03_12b91e1d3cb697c7ec6101241900158d_karagany_mafia.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_12b91e1d3cb697c7ec6101241900158d_karagany_mafia
-
Size
16.8MB
-
MD5
12b91e1d3cb697c7ec6101241900158d
-
SHA1
32f58f87793d251a6e6fd7cbc51fbcbb5f46ccc3
-
SHA256
d1fdb463eb3414317502d6a2934ba7999065cfb3fd216cff68ec4626a2b766fb
-
SHA512
de33d04fced5929e4d96865a2122b284fc145c6b39348c8135380c405b233c623f6f28a6100b2a10365cf992c47f33d764e71e4dc58144091dedf27e4f992867
-
SSDEEP
393216:rTuvmPY7EyCjPzwSA4tgAr3KBePYeEQtxK4qLcYE:PuvmPY7EyC7kSAf6YelKxoh
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-