Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-13_7f750ba446e9cb0cf729914dd0d069bf_mafia_nionspy
-
Size
327KB
-
Sample
240213-awyvrsfb8t
-
MD5
7f750ba446e9cb0cf729914dd0d069bf
-
SHA1
cfbf713d73a7e9d07b38dc0a975157a4cfa99634
-
SHA256
c60ac22acb3f6726b3f087b745d2d7f803bdf994becb98cffe3f462da8f34480
-
SHA512
0b2d2138c4814f7c51a0f00b90c730f1c2b13defdae1b0dfb904ab3ad8ffcf64983d945e284fb6a87434483274fcb680254deb3a7c5de6fdd5a5033efd80c1d5
-
SSDEEP
6144:Uj2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:Uj2TFafJiHCWBWPMjVWrXK0
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_7f750ba446e9cb0cf729914dd0d069bf_mafia_nionspy.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_7f750ba446e9cb0cf729914dd0d069bf_mafia_nionspy.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_7f750ba446e9cb0cf729914dd0d069bf_mafia_nionspy
-
Size
327KB
-
MD5
7f750ba446e9cb0cf729914dd0d069bf
-
SHA1
cfbf713d73a7e9d07b38dc0a975157a4cfa99634
-
SHA256
c60ac22acb3f6726b3f087b745d2d7f803bdf994becb98cffe3f462da8f34480
-
SHA512
0b2d2138c4814f7c51a0f00b90c730f1c2b13defdae1b0dfb904ab3ad8ffcf64983d945e284fb6a87434483274fcb680254deb3a7c5de6fdd5a5033efd80c1d5
-
SSDEEP
6144:Uj2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:Uj2TFafJiHCWBWPMjVWrXK0
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-