Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-01-18...py.exe

windows7-x64

7

2024-01-18...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-18_1487f35b21b9abaf0b15e89bc3762799_mafia_nionspy

  • Size

    344KB

  • Sample

    240118-2dbq3abha2

  • MD5

    1487f35b21b9abaf0b15e89bc3762799

  • SHA1

    0dddf05cc92d1381bdc17ff138bffb23458bfb03

  • SHA256

    de51a7afc114096fbddd485ff00e552045900b12fee018702aa33960a741e046

  • SHA512

    c79aa86f8c9b4ad2f23265a2e7961e2d04705fccf3a15a0ebfd764ce474d8b0d1b46c863f3e8894269407df40536e35224b03f26f27e0da2d356a33ebd0288ba

  • SSDEEP

    6144:NTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:NTBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-01-18_1487f35b21b9abaf0b15e89bc3762799_mafia_nionspy

    • Size

      344KB

    • MD5

      1487f35b21b9abaf0b15e89bc3762799

    • SHA1

      0dddf05cc92d1381bdc17ff138bffb23458bfb03

    • SHA256

      de51a7afc114096fbddd485ff00e552045900b12fee018702aa33960a741e046

    • SHA512

      c79aa86f8c9b4ad2f23265a2e7961e2d04705fccf3a15a0ebfd764ce474d8b0d1b46c863f3e8894269407df40536e35224b03f26f27e0da2d356a33ebd0288ba

    • SSDEEP

      6144:NTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:NTBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks