Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-20...py.exe

windows7-x64

7

2024-02-20...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-20_6435367e7099f2448b2e8245a3e441bb_mafia_nionspy

  • Size

    274KB

  • Sample

    240220-lh5xpsec6z

  • MD5

    6435367e7099f2448b2e8245a3e441bb

  • SHA1

    dad249df528eda1db27e5184d16e3f5624641307

  • SHA256

    3d7afbb15b2f41e675b490daf8972e64fe23069a2a59607de63975433ed979cf

  • SHA512

    fa097addb844a39be40de32008f539b9dc6e62eb768864332522c2770b36bd19343dee542bc370b4eea4b4de40143fa0db058b2d377cd79c620a303dcf2f54e3

  • SSDEEP

    6144:QYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:QYvEbrUjp3SpWggd3JBPlPDIQ3g

Score
7/10

Malware Config

Targets

    • Target

      2024-02-20_6435367e7099f2448b2e8245a3e441bb_mafia_nionspy

    • Size

      274KB

    • MD5

      6435367e7099f2448b2e8245a3e441bb

    • SHA1

      dad249df528eda1db27e5184d16e3f5624641307

    • SHA256

      3d7afbb15b2f41e675b490daf8972e64fe23069a2a59607de63975433ed979cf

    • SHA512

      fa097addb844a39be40de32008f539b9dc6e62eb768864332522c2770b36bd19343dee542bc370b4eea4b4de40143fa0db058b2d377cd79c620a303dcf2f54e3

    • SSDEEP

      6144:QYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:QYvEbrUjp3SpWggd3JBPlPDIQ3g

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks