Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-10-02_ec98094767a7cfb05912609fc1db12e4_mafia_magniber

  • Size

    4.6MB

  • Sample

    241002-e795dsxeln

  • MD5

    ec98094767a7cfb05912609fc1db12e4

  • SHA1

    8f807941fdc12504384ad8900b67aab31ea17e9d

  • SHA256

    7704bed6b85de192b085ceab4a402b742fd0653bb31ad757ed3f62aa335c7fae

  • SHA512

    84110bcdb58cacdb094ee47ef76efe77f8b3728d044e3b8b54cf93ab014464e5ceeee14cf780ff9c778ac063a0cea7516579e2c65cb175ab1ffe2fe2f5b9bea8

  • SSDEEP

    98304:gLPplYcF+0QMfgWsM0r1Qn/tnCeftsjQ4JBG0Fe4:MZXZfgsCe2QQo4

Score
7/10

Malware Config

Targets

    • Target

      2024-10-02_ec98094767a7cfb05912609fc1db12e4_mafia_magniber

    • Size

      4.6MB

    • MD5

      ec98094767a7cfb05912609fc1db12e4

    • SHA1

      8f807941fdc12504384ad8900b67aab31ea17e9d

    • SHA256

      7704bed6b85de192b085ceab4a402b742fd0653bb31ad757ed3f62aa335c7fae

    • SHA512

      84110bcdb58cacdb094ee47ef76efe77f8b3728d044e3b8b54cf93ab014464e5ceeee14cf780ff9c778ac063a0cea7516579e2c65cb175ab1ffe2fe2f5b9bea8

    • SSDEEP

      98304:gLPplYcF+0QMfgWsM0r1Qn/tnCeftsjQ4JBG0Fe4:MZXZfgsCe2QQo4

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks