Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-01...py.exe

windows7-x64

7

2024-02-01...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_3cf51a911769d803b2523e10ffc65f5a_mafia_nionspy

  • Size

    288KB

  • Sample

    240201-k512laagdk

  • MD5

    3cf51a911769d803b2523e10ffc65f5a

  • SHA1

    78343eb542e7745cb3c9335beccddec506d23e2f

  • SHA256

    ebf03bba82672b29cef006fbc479784aa3fef1bd6c12b21d5c33f16bdb206137

  • SHA512

    fa716d2a313f73dc915af8bd5ed5d7138c3fe6c717782568084c1931e7508673026e2535ff5d11644dee27a8e41d48882328d0c0dd3d318883df2b7df0aa826f

  • SSDEEP

    6144:JQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:JQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-02-01_3cf51a911769d803b2523e10ffc65f5a_mafia_nionspy

    • Size

      288KB

    • MD5

      3cf51a911769d803b2523e10ffc65f5a

    • SHA1

      78343eb542e7745cb3c9335beccddec506d23e2f

    • SHA256

      ebf03bba82672b29cef006fbc479784aa3fef1bd6c12b21d5c33f16bdb206137

    • SHA512

      fa716d2a313f73dc915af8bd5ed5d7138c3fe6c717782568084c1931e7508673026e2535ff5d11644dee27a8e41d48882328d0c0dd3d318883df2b7df0aa826f

    • SSDEEP

      6144:JQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:JQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks