Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-28_b0f529f18e96d0f235b487bb57c9d0ad_mafia
-
Size
906KB
-
Sample
240628-jzklzsygkd
-
MD5
b0f529f18e96d0f235b487bb57c9d0ad
-
SHA1
9a1c14bb79038c4041ee34a1f861db51e13571a6
-
SHA256
be8e34a735e8dafd2243995831ac80e36aaa1891cd5cca66649dffa2acbf9b97
-
SHA512
8fa633986daf64fce6a73b6e888f73045e9967de5ba507e6889dca242637053fc1c358e1ea059b3828075ba1fbb0435aa77131b031ae6ef14660fabf988257d7
-
SSDEEP
12288:+UHzKufgk0IpzpXxsPsM+80/9OCOaVLR7g1xGkgBaFSkYu8DU0OYhLu0O49gY4B:NHVfSIpzpBsGACO0LRs1kk6i6uKVOu4B
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-28_b0f529f18e96d0f235b487bb57c9d0ad_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-28_b0f529f18e96d0f235b487bb57c9d0ad_mafia.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-28_b0f529f18e96d0f235b487bb57c9d0ad_mafia
-
Size
906KB
-
MD5
b0f529f18e96d0f235b487bb57c9d0ad
-
SHA1
9a1c14bb79038c4041ee34a1f861db51e13571a6
-
SHA256
be8e34a735e8dafd2243995831ac80e36aaa1891cd5cca66649dffa2acbf9b97
-
SHA512
8fa633986daf64fce6a73b6e888f73045e9967de5ba507e6889dca242637053fc1c358e1ea059b3828075ba1fbb0435aa77131b031ae6ef14660fabf988257d7
-
SSDEEP
12288:+UHzKufgk0IpzpXxsPsM+80/9OCOaVLR7g1xGkgBaFSkYu8DU0OYhLu0O49gY4B:NHVfSIpzpBsGACO0LRs1kk6i6uKVOu4B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-