Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-04...py.exe

windows7-x64

7

2024-02-04...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_0731bbf90e266a07373107ee7723a7e6_mafia_nionspy

  • Size

    280KB

  • Sample

    240204-fnzd8acdcr

  • MD5

    0731bbf90e266a07373107ee7723a7e6

  • SHA1

    133e1aae41fb6f0c3a49c482c1aa4edf33624c82

  • SHA256

    5c9a0ec78c8bce95b9493e65def6f8d08a7e75e1c4efde25dd044731ffcfc12d

  • SHA512

    8755e90abae997de506118afe55ff26bd431e8320fa66adf09bb7e528fab6b5cd91a92cd5219a2643da0a06ad706b9d534f7e6d9dc9cada4d1e7bb8c4591419c

  • SSDEEP

    6144:vQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:vQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-02-04_0731bbf90e266a07373107ee7723a7e6_mafia_nionspy

    • Size

      280KB

    • MD5

      0731bbf90e266a07373107ee7723a7e6

    • SHA1

      133e1aae41fb6f0c3a49c482c1aa4edf33624c82

    • SHA256

      5c9a0ec78c8bce95b9493e65def6f8d08a7e75e1c4efde25dd044731ffcfc12d

    • SHA512

      8755e90abae997de506118afe55ff26bd431e8320fa66adf09bb7e528fab6b5cd91a92cd5219a2643da0a06ad706b9d534f7e6d9dc9cada4d1e7bb8c4591419c

    • SSDEEP

      6144:vQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:vQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks