Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-24...py.exe

windows7-x64

7

2024-02-24...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-24_45a0789b3b248196560d2dfb9b778ed3_mafia_nionspy

  • Size

    327KB

  • Sample

    240224-bzag1sef9z

  • MD5

    45a0789b3b248196560d2dfb9b778ed3

  • SHA1

    89ad62e9f4e8cb5872e74a3488d8dac4236f7ed7

  • SHA256

    d9de72d39ce82b5c6950cc62dfc12970ab47b7e94a679f999f213abf4218bf3c

  • SHA512

    0de6461bddad1a91631c80a6f14e6403c45eff8727376f537ebd743b5104f0b886367b3a055816edfb8f0ebc3ab69b0488d8ecd7b838bb8eeb44548f7ca514c1

  • SSDEEP

    6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:p2TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-02-24_45a0789b3b248196560d2dfb9b778ed3_mafia_nionspy

    • Size

      327KB

    • MD5

      45a0789b3b248196560d2dfb9b778ed3

    • SHA1

      89ad62e9f4e8cb5872e74a3488d8dac4236f7ed7

    • SHA256

      d9de72d39ce82b5c6950cc62dfc12970ab47b7e94a679f999f213abf4218bf3c

    • SHA512

      0de6461bddad1a91631c80a6f14e6403c45eff8727376f537ebd743b5104f0b886367b3a055816edfb8f0ebc3ab69b0488d8ecd7b838bb8eeb44548f7ca514c1

    • SSDEEP

      6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:p2TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks