Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
05/05/2024, 09:48
Behavioral task
behavioral1
Sample
2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe
-
Size
17.2MB
-
MD5
c4eb8a7456786b2c1c7bdaeb4f9ce4f7
-
SHA1
d62b8d4add74f95c8f10efb260703669f6f0d755
-
SHA256
42c746ca05ba68c8158bf6bdefcee209b7a93b24d570bd08b98c23a0eab10de9
-
SHA512
1cb4b83b9c4192c8e363180194ab67d843d235f02c12238be276f362b83cdeb0d284c64c68ad0dffd2e051c2a542c576dfabd9c0dbc9ebf337d6ed528e7c9ba5
-
SSDEEP
196608:S6YveQyu7BsHYvnQYGZ+KjeOsK1iiGrO4X78SKP+bxzS0Qw5kyYJBtnb36yWToJs:4XA1EL78SKXo+woJsv6tWKFdu9CM8S
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe -
Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe 1844 2024-05-05_c4eb8a7456786b2c1c7bdaeb4f9ce4f7_mafia.exe