Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-10-05_3cae4581ac71614638012763dfcc4150_mafia

  • Size

    2.6MB

  • Sample

    241005-3ebccswcml

  • MD5

    3cae4581ac71614638012763dfcc4150

  • SHA1

    c162658b1b792427f6717186c599bb2d1a451289

  • SHA256

    51373c0c4512109ee8bba8149f5fa371cb944081aaa38108ce6077e4e23da862

  • SHA512

    140a1c3e29dcb75dd1695a14cdbfab0e589d3fd7827ac71376490ee289a467ccd0a70de7c72c3035a8b09a8aaf32340fabb915bc92f8eeeca4bcf038f8af40cd

  • SSDEEP

    49152:OTGkQy5QZuTtS0rQMYOQ+q8CE0TG4QnTGHQc9KFeMv:OKkVWsM0r1QnDK4uKHT0Feu

Score
7/10

Malware Config

Targets

    • Target

      2024-10-05_3cae4581ac71614638012763dfcc4150_mafia

    • Size

      2.6MB

    • MD5

      3cae4581ac71614638012763dfcc4150

    • SHA1

      c162658b1b792427f6717186c599bb2d1a451289

    • SHA256

      51373c0c4512109ee8bba8149f5fa371cb944081aaa38108ce6077e4e23da862

    • SHA512

      140a1c3e29dcb75dd1695a14cdbfab0e589d3fd7827ac71376490ee289a467ccd0a70de7c72c3035a8b09a8aaf32340fabb915bc92f8eeeca4bcf038f8af40cd

    • SSDEEP

      49152:OTGkQy5QZuTtS0rQMYOQ+q8CE0TG4QnTGHQc9KFeMv:OKkVWsM0r1QnDK4uKHT0Feu

    Score
    7/10
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks