Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-09-05...mi.exe

windows7-x64

10

2024-09-05...mi.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-05_903a2ac54202586e02537c0e78ce3b0a_mafia_wapomi

  • Size

    1.6MB

  • Sample

    240905-jcj2yavhmq

  • MD5

    903a2ac54202586e02537c0e78ce3b0a

  • SHA1

    08ac763fba8ef383e7012f968773e22909158bef

  • SHA256

    f5b8622397ec9d58a8579e505c41b61a04c97830dd19d49cb7fad159a163447b

  • SHA512

    e629bccf5c1070a74a24c4c6a8fb73b35a35850e46496d7c028ea7dde05454cb1a2ab2675b778a2644ae6a16f775ab87e90ea1696ad3e0a49e44e20f626ae2f8

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

Score
10/10
bdaejecaspackv2backdoordiscovery

Malware Config

Targets

    • Target

      2024-09-05_903a2ac54202586e02537c0e78ce3b0a_mafia_wapomi

    • Size

      1.6MB

    • MD5

      903a2ac54202586e02537c0e78ce3b0a

    • SHA1

      08ac763fba8ef383e7012f968773e22909158bef

    • SHA256

      f5b8622397ec9d58a8579e505c41b61a04c97830dd19d49cb7fad159a163447b

    • SHA512

      e629bccf5c1070a74a24c4c6a8fb73b35a35850e46496d7c028ea7dde05454cb1a2ab2675b778a2644ae6a16f775ab87e90ea1696ad3e0a49e44e20f626ae2f8

    • SSDEEP

      49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

    Score
    10/10
    bdaejecaspackv2backdoordiscovery

    • Bdaejec

      Bdaejec is a backdoor written in C++.

      backdoorbdaejec

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks