Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12/03/2025, 07:39
General
-
Target
2025-03-12_5b7cf52155754788f5277ef7745306ec_mafia.exe
-
Size
6.6MB
-
MD5
5b7cf52155754788f5277ef7745306ec
-
SHA1
57429d324340031d73f92824cfeb4a5bd2307348
-
SHA256
d76b1a7ffd0c9b3d86de88fd6bc34831d712cb4c143cde6d0e8221382dd4db94
-
SHA512
c0bf42f1e0be7d587d7f3d8fcc9367df2d7de98281e889b3a0c3af029cf590cb04a879b116c6e957caf2bc5b3e39a5513b5720e7a82011d3428b09eafe32917e
-
SSDEEP
49152:Eer5tvO2nzs4h9TsYaK9YxtP9PBZiqRouij6sBR4u8nn:X/vO2nQkaYMz5ZitP60R4u8n
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-12_5b7cf52155754788f5277ef7745306ec_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-12_5b7cf52155754788f5277ef7745306ec_mafia.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2856 -s 6842⤵
- Program crash
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
6.9MB
-
Filesize
608KB
-
Filesize
592KB
-
Filesize
304KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
336KB
-
Filesize
6.9MB