Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-30_90d65e438326af50368ba5adade91127_mafia
-
Size
800KB
-
Sample
240530-jd3knsah3z
-
MD5
90d65e438326af50368ba5adade91127
-
SHA1
44d65ffb4866b62e50e748d06a35bdcf3f6ad9d2
-
SHA256
d60b57e55562af375f14b982cd923f5a51a8d3b126e19e1b6c5d223c267fbec0
-
SHA512
df8b85276f2a3014bf48e92e371a154c8802ff9568d95d3e126ae5d41ea803ac08b99c02bf9b2348b51c0d4cc8368231b0ee82c719e443898534aaa7c2eea921
-
SSDEEP
24576:5X47adsXAtYKzIdHdOgV6gh8yOZ0blPR:5X4WdsXMzIpog8gB5ZPR
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_90d65e438326af50368ba5adade91127_mafia.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-30_90d65e438326af50368ba5adade91127_mafia.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-30_90d65e438326af50368ba5adade91127_mafia
-
Size
800KB
-
MD5
90d65e438326af50368ba5adade91127
-
SHA1
44d65ffb4866b62e50e748d06a35bdcf3f6ad9d2
-
SHA256
d60b57e55562af375f14b982cd923f5a51a8d3b126e19e1b6c5d223c267fbec0
-
SHA512
df8b85276f2a3014bf48e92e371a154c8802ff9568d95d3e126ae5d41ea803ac08b99c02bf9b2348b51c0d4cc8368231b0ee82c719e443898534aaa7c2eea921
-
SSDEEP
24576:5X47adsXAtYKzIdHdOgV6gh8yOZ0blPR:5X4WdsXMzIpog8gB5ZPR
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-